import sun.security.provider.certpath.SunCertPathBuilderParameters; //导入依赖的package包/类
public static void main(String[] args) throws Exception {

        TrustAnchor anchor =
            new TrustAnchor(CertUtils.getCertFromFile("mgrM2mgrM"), null);
        X509Certificate target = CertUtils.getCertFromFile("mgrM2leadMA");
        X509CertSelector xcs = new X509CertSelector();
        xcs.setSubject("CN=leadMA,CN=mgrM,OU=prjM,OU=divE,OU=Comp,O=sun,C=us");
        xcs.setCertificate(target);
        SunCertPathBuilderParameters params =
            new SunCertPathBuilderParameters(Collections.singleton(anchor),xcs);
        params.setBuildForward(false);
        CertStore cs = CertUtils.createStore(new String[]
            {"mgrM2prjM", "prjM2mgrM", "prjM2divE", "mgrM2leadMA" });
        params.addCertStore(cs);
        CertStore cs2 = CertUtils.createCRLStore
            (new String[] {"mgrMcrl", "prjMcrl"});
        params.addCertStore(cs2);
        PKIXCertPathBuilderResult res = CertUtils.build(params);
    }
 

import sun.security.provider.certpath.SunCertPathBuilderParameters; //导入依赖的package包/类
public static void main(String args[]) throws Exception {

        // generate certificate from cert string
        CertificateFactory cf = CertificateFactory.getInstance("X.509");

        // create a set of trust anchors
        LinkedHashSet<TrustAnchor> trustAnchors = new LinkedHashSet<>();

        ByteArrayInputStream is =
            new ByteArrayInputStream(NoiceTrusedCertStr.getBytes());
        Certificate trustedCert = cf.generateCertificate(is);
        is.close();
        TrustAnchor anchor =
            new TrustAnchor((X509Certificate)trustedCert, null);
        trustAnchors.add(anchor);

        is = new ByteArrayInputStream(trustedCertStr.getBytes());
        trustedCert = cf.generateCertificate(is);
        is.close();
        anchor = new TrustAnchor((X509Certificate)trustedCert, null);
        trustAnchors.add(anchor);

        is = new ByteArrayInputStream(NoiceTrusedCertStr_2nd.getBytes());
        trustedCert = cf.generateCertificate(is);
        is.close();
        anchor = new TrustAnchor((X509Certificate)trustedCert, null);
        trustAnchors.add(anchor);

        // create a list of certificates
        List<Certificate> chainList = new ArrayList<>();

        is = new ByteArrayInputStream(targetCertStr.getBytes());
        Certificate cert = cf.generateCertificate(is);
        is.close();
        chainList.add(cert);

        is = new ByteArrayInputStream(certIssuerStr.getBytes());
        cert = cf.generateCertificate(is);
        is.close();
        chainList.add(cert);

        is = new ByteArrayInputStream(caSignerStr.getBytes());
        cert = cf.generateCertificate(is);
        is.close();
        chainList.add(cert);

        // create a certificate selector
        X509CertSelector xcs = new X509CertSelector();
        X509Certificate eeCert = (X509Certificate)chainList.get(0);
        xcs.setSubject(eeCert.getSubjectX500Principal());

        // reverse build
        SunCertPathBuilderParameters params =
            new SunCertPathBuilderParameters(trustAnchors, xcs);
        params.setBuildForward(false);
        params.setRevocationEnabled(false);

        CollectionCertStoreParameters ccsp =
            new CollectionCertStoreParameters(chainList);
        params.addCertStore(CertStore.getInstance("Collection", ccsp));

        CertPathBuilder cpb = CertPathBuilder.getInstance("PKIX");
        CertPathBuilderResult res = cpb.build(params);
    }