Test crests

Create the Server's Truststore

Use keytool to Create the Server's Truststore

Enter the command:

keytool -importkeystore -srckeystore client.pks -srcstoretype PKCS12 \
    -srcstorepass password \
    -destkeystore amqt3.ts -deststorepass password \
    -destalias aclient -alias 1

This creates the server's truststore (file amqt3.ts). The file name is arbitrary.

Alternative Creation of the Server's Truststore

Enter the command:

keytool -importkeystore -srckeystore TestCA.pks -srcstoretype PKCS12 \
    -srcstorepass password \
    -destkeystore amqt3CliCA.ts -deststorepass password \
    -destalias aclientCA -alias 1

This is likely a better approach to creating the server's truststore. It allows a single entry in the truststore that will support multiple clients with certificates signed by the CA.