在Java 7中构建PKIX路径失败，但在Java 8中不能-尽管有浏览器信任的Let's Encrypt证书，但仍无法连接到我的HTTPS服务器

openssl s_client -connect yourdomain.com:443 -showcerts

keytool -import -trustcacerts -file /path/to/certificate.crt -alias youralias -keystore $JAVA_HOME/jre/lib/security/cacerts

ssl_protocols TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256';

import java.security.KeyStore;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;

public class SSLUtils {
    public static void main(String[] args) throws Exception {
        // 加载自定义信任库
        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
        trustStore.load(new FileInputStream("/path/to/customTrustStore.jks"), "password".toCharArray());

        // 初始化TrustManagerFactory
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        tmf.init(trustStore);

        // 初始化SSLContext
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, tmf.getTrustManagers(), null);

        // 使用sslContext进行HTTPS连接
    }
}