Guys, what am I missing here. My certificate in .keystore should be
imported to server trust store ? Please suggest ...


The error you showed happens on the client side, right? So you need to export the server's key and add it to the client's truststore:

export server key into temp file
keytool -export -file temp$.cer -alias serverkey -keyalg RSA -keystore <server's keystore>


then import this file into client's keystore
keytool -import -file temp$.cer -alias serverkey -keyalg RSA -keystore <client's keystore>


check that it got imported:
keytool -list -keystore <keystore file>

This needs to go both ways if you are using client certificates: the client's key needs to be exported the same way and imported into server's truststore

Reply via email to