The trust manager algorithm used by undertow can not be changed. The server configuration file does not contain any support for changing the algorithm, nor is Java standard system property ssl.TrustManagerFactory.algorithm honored. Apparently undertow forces use of PKIX.

In earlier jboss versions jboss-web supported changing trust manager algorithm in the Connector element in the web server configuration.