certificados.txt

Servidor Certificado:
keytool -genkey -alias localhost -keyalg RSA -keystore /opt/CAS/certs/server.keystore
openssl genrsa -out ca.key 1024
openssl req -new -key ca.key -out ca.csr
openssl x509 -req -days 1095 -in ca.csr -signkey ca.key -out ca.crt
keytool -import -keystore cacerts.jks -storepass dianacas -alias server -file ca.crt

Cliente certificado:
keytool -genkey -alias localhost -keyalg RSA -keystore /opt/APP/certs/server.keystore
openssl genrsa -out ca.key 1024
openssl req -new -key ca.key -out ca.csr
openssl x509 -req -days 1095 -in ca.csr -signkey ca.key -out ca.crt
keytool -import -keystore cacerts.jks -storepass dianacas -alias client -file ca.crt