It includes an implementation of SSL 3.0 — the current SSL standard — and TLS (Transport Layer Security) 1.0, the next generation of SSL. JSSE also provides a suite of APIs for creating and ...

So as you can see putting a certificate on the client side stops the attacker dead. With client-certificates in play, the SSL negotiation is based on the public/private key pair of both the client ...

The first step in an SSL connection is to perform the SSL handshake. The handshake authenticates the server (and optionally the client) and establishes the keying material that will be used to protect ...

I don't believe you can. It would kind of defeat the purposes SSL if the web server always pushed you what "it" thought were good trustworthy CAs and your devices just said "oh ok if you say so!".