content: /*
   ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
   ~                                                                               ~
   ~ The MIT License (MIT)                                                         ~
   ~                                                                               ~
   ~ Copyright (c) 2015-2025 miaixz.org sandao and other contributors.             ~
   ~                                                                               ~
   ~ Permission is hereby granted, free of charge, to any person obtaining a copy  ~
   ~ of this software and associated documentation files (the "Software"), to deal ~
   ~ in the Software without restriction, including without limitation the rights  ~
   ~ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell     ~
   ~ copies of the Software, and to permit persons to whom the Software is         ~
   ~ furnished to do so, subject to the following conditions:                      ~
   ~                                                                               ~
   ~ The above copyright notice and this permission notice shall be included in    ~
   ~ all copies or substantial portions of the Software.                           ~
   ~                                                                               ~
   ~ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR    ~
   ~ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,      ~
   ~ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE   ~
   ~ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER        ~
   ~ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, ~
   ~ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN     ~
   ~ THE SOFTWARE.                                                                 ~
   ~                                                                               ~
   ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
  */
  package org.miaixz.bus.socket.secure.ssl.factory;
  
  import java.io.InputStream;
  import java.security.KeyStore;
  import java.security.SecureRandom;
  import java.security.cert.X509Certificate;
  
  import javax.net.ssl.SSLContext;
  import javax.net.ssl.TrustManager;
  import javax.net.ssl.TrustManagerFactory;
  import javax.net.ssl.X509TrustManager;
  
  /**
   * @author Kimi Liu
   * @since Java 17+
   */
  public class ClientSSLContextFactory implements SSLContextFactory {
  
      private InputStream trustInputStream;
      private String trustPassword;
  
      public ClientSSLContextFactory() {
      }
  
      public ClientSSLContextFactory(InputStream trustInputStream, String trustPassword) {
          this.trustInputStream = trustInputStream;
          this.trustPassword = trustPassword;
      }
  
      @Override
      public SSLContext create() throws Exception {
          TrustManager[] trustManagers;
          if (trustInputStream != null) {
              KeyStore ts = KeyStore.getInstance("JKS");
              ts.load(trustInputStream, trustPassword.toCharArray());
              TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
              tmf.init(ts);
              trustManagers = tmf.getTrustManagers();
          } else {
              trustManagers = new TrustManager[] { new X509TrustManager() {
  
                  @Override
                  public void checkClientTrusted(X509Certificate[] x509Certificates, String s) {
                  }
  
                  @Override
                  public void checkServerTrusted(X509Certificate[] x509Certificates, String s) {
                  }
  
                  @Override
                  public X509Certificate[] getAcceptedIssuers() {
                      return new X509Certificate[0];
                  }
              } };
          }
          SSLContext sslContext = SSLContext.getInstance("TLS");
          sslContext.init(null, trustManagers, new SecureRandom());
          return sslContext;
      }
  
  }
  