We are not willing to rewrite Java's SSL Context to get around this. The tutorials online for how to inject a SSL Context into HttpsURLConnection and friends are legion and those should be followed. If the developer is well and truly set on this I think she can even include her self signed cert as part of the application and import it at runtime.