code: @Override
      protected TrustManager[] getTrustManagers(String keystoreType, String keystoreProvider, String algorithm)
              throws Exception {
          KeyStore trustStore = getTrustStore(keystoreType, keystoreProvider);
  
          CertStore crlStore = null;
          if (crlLocation != null) {
              crlStore = GlobusSSLHelper.findCRLStore((String) crlLocation);
          }
  
          ResourceSigningPolicyStore policyStore = null;
          if (signingPolicyLocation != null) {
              policyStore = Stores.getSigningPolicyStore((String) signingPolicyLocation);
          }
  
          boolean rejectLimitedProxy = rejectLimitedProxyEntry != null &&
              Boolean.parseBoolean((String) rejectLimitedProxyEntry);
  
          X509ProxyCertPathParameters parameters = new X509ProxyCertPathParameters(trustStore, crlStore, policyStore,
                  rejectLimitedProxy);
          TrustManager trustManager = new PKITrustManager(new X509ProxyCertPathValidator(), parameters);
          return new TrustManager[]{trustManager};
      }
docs: Create a Globus trust manager which supports proxy certificates.  This requires that the CRL store, and
  signing policy store be configured.
  
  @param keystoreType     The type of keystore to create.
  @param keystoreProvider The keystore provider to use.
  @param algorithm        The keystore algorithm.
  @return A set of configured TrustManagers.
  @throws Exception If we cannot create the trust managers.