--- a/jdk/src/java.base/share/classes/com/sun/net/ssl/HttpsURLConnection.java Wed Jan 18 08:02:53 2017 +0800
+++ b/jdk/src/java.base/share/classes/com/sun/net/ssl/HttpsURLConnection.java Wed Jul 27 02:23:16 2016 +0000
@@ -69,6 +69,10 @@
/**
* Returns the server's X.509 certificate chain, or null if
* the server did not authenticate.
+ * <P>
+ * Note: The returned value may not be a valid certificate chain
+ * and should not be relied on for trust decisions.
+ *
* @return the server certificate chain
*/
public abstract Certificate[] getServerCertificates()