loadAll() {
+ return IntegrationsLoader.loadAll(ServiceLoader.load(SSLContextProvider.class), SSLContextProvider.class);
+ }
+}
diff --git a/src/main/java/org/cryptomator/networking/SSLContextWithMacKeychain.java b/src/main/java/org/cryptomator/networking/SSLContextWithMacKeychain.java
new file mode 100644
index 000000000..0078fdfd3
--- /dev/null
+++ b/src/main/java/org/cryptomator/networking/SSLContextWithMacKeychain.java
@@ -0,0 +1,21 @@
+package org.cryptomator.networking;
+
+import org.cryptomator.integrations.common.OperatingSystem;
+
+import java.io.IOException;
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.cert.CertificateException;
+
+/**
+ * SSLContextProvider for macOS using the macOS Keychain as truststore
+ */
+@OperatingSystem(OperatingSystem.Value.MAC)
+public class SSLContextWithMacKeychain extends SSLContextDifferentTrustStoreBase implements SSLContextProvider {
+
+ @Override
+ KeyStore getTruststore() throws KeyStoreException, CertificateException, IOException, NoSuchAlgorithmException {
+ return KeyStore.getInstance("KeychainStore-ROOT");
+ }
+}
diff --git a/src/main/java/org/cryptomator/networking/SSLContextWithPKCS12TrustStore.java b/src/main/java/org/cryptomator/networking/SSLContextWithPKCS12TrustStore.java
new file mode 100644
index 000000000..f530435f8
--- /dev/null
+++ b/src/main/java/org/cryptomator/networking/SSLContextWithPKCS12TrustStore.java
@@ -0,0 +1,42 @@
+package org.cryptomator.networking;
+
+import org.cryptomator.integrations.common.CheckAvailability;
+import org.cryptomator.integrations.common.OperatingSystem;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.NoSuchFileException;
+import java.nio.file.Path;
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.cert.CertificateException;
+import java.util.Optional;
+
+/**
+ * SSLContextProvider for Linux using a PKCS#12 file as trust store
+ */
+@OperatingSystem(OperatingSystem.Value.LINUX)
+@CheckAvailability
+public class SSLContextWithPKCS12TrustStore extends SSLContextDifferentTrustStoreBase implements SSLContextProvider {
+
+ private static final String CERT_FILE_LOCATION_PROPERTY = "cryptomator.networking.truststore.p12Path";
+
+ @Override
+ KeyStore getTruststore() throws KeyStoreException, CertificateException, IOException, NoSuchAlgorithmException {
+ var pkcs12FilePath = Path.of(System.getProperty(CERT_FILE_LOCATION_PROPERTY));
+ try {
+ return KeyStore.getInstance(pkcs12FilePath.toFile(), new char[]{});
+ } catch (IllegalArgumentException e) {
+ throw new NoSuchFileException(pkcs12FilePath.toString());
+ }
+ }
+
+ @CheckAvailability
+ public static boolean isSupported() {
+ var pkcs12Path = System.getProperty(CERT_FILE_LOCATION_PROPERTY);
+ return Optional.ofNullable(pkcs12Path) //
+ .map(Path::of) //
+ .map(Files::exists).orElse(false);
+ }
+}
diff --git a/src/main/java/org/cryptomator/networking/SSLContextWithWindowsCertStore.java b/src/main/java/org/cryptomator/networking/SSLContextWithWindowsCertStore.java
new file mode 100644
index 000000000..0f1ea04b5
--- /dev/null
+++ b/src/main/java/org/cryptomator/networking/SSLContextWithWindowsCertStore.java
@@ -0,0 +1,21 @@
+package org.cryptomator.networking;
+
+import org.cryptomator.integrations.common.OperatingSystem;
+
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+
+/**
+ * SSLContextProvider for Windows using the Windows certificate store as trust store
+ *
+ * In order to work, the jdk.crypto.mscapi jmod is needed
+ */
+@OperatingSystem(OperatingSystem.Value.WINDOWS)
+public class SSLContextWithWindowsCertStore extends SSLContextDifferentTrustStoreBase implements SSLContextProvider {
+
+ @Override
+ KeyStore getTruststore() throws KeyStoreException {
+ return KeyStore.getInstance("WINDOWS-ROOT");
+ }
+
+}