What is the primary purpose of a Java truststore?

What is the primary purpose of a Java truststore?

• A. To store public certificates for other parties to validate their identities
• B. To store private keys for server authentication
• C. To store private certificates used for signing
• D. To store TLS session data

Answer: (A)

The truststore is where you keep certificates that you trust. In TLS, when your application connects to a server, it uses the truststore to verify the server’s certificate by checking it against the trusted public certificates (or CAs) you have stored. This lets you confirm the server’s identity without exposing any private material. Because it holds public certificates, it does not store private keys or perform signing. That’s why the primary purpose is to store public certificates for other parties to validate their identities. The other options describe private keys or session data, which belong in different stores or are ephemeral and not part of the truststore.

The truststore is where you keep certificates that you trust. In TLS, when your application connects to a server, it uses the truststore to verify the server’s certificate by checking it against the trusted public certificates (or CAs) you have stored. This lets you confirm the server’s identity without exposing any private material. Because it holds public certificates, it does not store private keys or perform signing. That’s why the primary purpose is to store public certificates for other parties to validate their identities. The other options describe private keys or session data, which belong in different stores or are ephemeral and not part of the truststore.