okhttp BasicCertificateChainCleaner uses the value of CustomCertManager.acceptedIssuers, but we don't return anything.
We should find out what BasicCertificateChainCleaner exactly does and why and whether we should return something in acceptedIssuers.
It may also be useful to implement X509ExtendedTrustManager for Android. Then okhttp would use AndroidCertificateChainCleaner.
okhttp
BasicCertificateChainCleaneruses the value ofCustomCertManager.acceptedIssuers, but we don't return anything.We should find out what
BasicCertificateChainCleanerexactly does and why and whether we should return something inacceptedIssuers.It may also be useful to implement
X509ExtendedTrustManagerfor Android. Then okhttp would useAndroidCertificateChainCleaner.