title: HttpsUrlConnection using KeyStore instead of TrustStore with WebSphere Liberty Profile
body: <p>We are using HttpsUrlConnection in a WebSphere TAI in WebSphere Liberty Profile to connect to a security server. I had a lot of problems with SSL cert errors, until I discovered that it is looking for signer certs in the WLP keystore, not the WLP truststore or JVM truststore. There is nothing in the code setting this, it must be a default. But I am confused, because when we use an HTTP client in other code, it uses the JVM's truststore.</p>
  
  <p>How can I make the HttpsUrlConnection use the WLP or JVM truststore, and not the keystore?</p>