Creates a JKS keystore that uses exampleCA as a trust anchor.

gentrustanchor.sh

#!/bin/bash

export PW=`cat password`

# Create a JKS keystore that trusts the example CA, with the default password.  
# This is used by the client.
keytool -import -v \
  -alias exampleca \
  -file exampleca.crt \
  -keypass:env PW \
  -storepass changeit \
  -keystore trustanchors.jks << EOF
yes
EOF

# List out the details of the store password.
keytool -list -v \
  -keystore trustanchors.jks \
  -storepass changeit