实施X509TrustManager

我目前正在尝试通过Java中的SSL / TLS通过Internet传输数据，我希望双方都进行身份验证。我已经实现了KeyManager来加载密钥对并向另一方提供适当的证书。

现在，我正在尝试检查证书，并通过实现自己的TrustManager来做到这一点（双方都持有另一方的证书，所有内容都是自签名的）。但是，getAcceptedIssuers不能像我希望的那样工作，因为即使不返回任何内容，连接仍然可以毫无问题地建立。

为什么不拒绝证书？

protected static class SelectingTrustManager implements X509TrustManager{
    final X509TrustManager delegate;

    private String[] trustedAliases;
    private final KeyStore keystore;

    public SelectingTrustManager(X509TrustManager delegate, KeyStore keystore, String[] trustedAliases) {
        this.trustedAliases = trustedAliases;
        this.keystore = keystore;
        this.delegate = delegate;
    }

    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException{
        delegate.checkClientTrusted(chain, authType);
    }

    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException{
        delegate.checkServerTrusted(chain, authType);
    }

    public X509Certificate[] getAcceptedIssuers(){
        return new X509Certificate[0];
    }

}