A DESCRIPTION OF THE PROBLEM :
The Java API internal can generate self signed certificates. This is possible via some deprecated packages. As this API is needed for the Java Keytool, it will not be removed in the future.

Self signed certificates are important for E2E connections without a server. Currently this is only possible via third party library. Add an API, for example in java.security.cert.CertificateFactory or a new class X509CertificateBuilder, that can generate self signed certificates.