makeTrustManager

Creates an X509TrustManager bound to this TrustPin instance.

Useful for OkHttp's sslSocketFactory(factory, trustManager) API.

Return

A new X509TrustManager with TrustPin validation

Throws

if the platform's TLS stack cannot be configured for pinning (JCE/JSSE failure — environmental, not a TrustPin policy decision).

if the SDK refuses to operate because the runtime environment is not a supported production Android device.