How to ignore expired certificates from outside a Java application?

Question

We have a Java application that we need to ignore an expired self-signed cert, however we cannot modify the code to do this. I wondering if there was a System Property or environment variable that we could provide at start up that would allow us to have all expired cert's ignored for now, or even be more specific and provide externally the specific cert that we would like to have the expiration ignored.

Anyone have any ideas that would work?

Answer 1

An alternative might be to use keytool to import the expired certificate into the client-side keystore as a trusted certificate. Have you tried that?

A better alternative would be to replace the expired certificate in the server with a current certificate that is not self-signed.