It looks like I cannot specify a separate truststore for the server when I require client authentication. It appears that I need to put the client certificate in the same keystore as the server's private key.
It would be nice to be able to separate the two as the private key is typically something one wants to keep locked up tight as a drum whereas the truststore one might want to interactively add certificates of clients one trusts. -- View this message in context: http://activemq.2283324.n4.nabble.com/How-to-configure-embedded-SSL-broker-using-just-Java-code-tp4674768p4674776.html Sent from the ActiveMQ - User mailing list archive at Nabble.com.