Guys, what am I missing here. My certificate in .keystore should beThe error you showed happens on the client side, right? So you need to export the server's key and add it to the client's truststore:
imported to server trust store ? Please suggest ...
export server key into temp file
keytool -export -file temp$.cer -alias serverkey -keyalg RSA -keystore <server's keystore>
then import this file into client's keystore
keytool -import -file temp$.cer -alias serverkey -keyalg RSA -keystore <client's keystore>
check that it got imported: keytool -list -keystore <keystore file>
This needs to go both ways if you are using client certificates: the client's key needs to be exported the same way and imported into server's truststore