@Override
    public void checkClientTrusted(X509Certificate[] x509Certificates,
            String string) {
        // Do not validate the certificate at this point. The certificate is going to be used
        // when the remote server requests to do EXTERNAL SASL
    }
KeyStore that holds the trusted CA
xmppserver/src/main/java/org/jivesoftware/openfire/net/ServerTrustManager.java