--- /dev/null
+# this script generates a simple self-signed keypair
+
+wget -N http://www.cacert.org/certs/root.crt
+wget -N http://www.cacert.org/certs/class3.crt
+
+keytool -importcert -keystore ../../config/cacerts.jks -file root.crt -alias root -storepass "changeit"
+keytool -importcert -keystore ../../config/cacerts.jks -file class3.crt -alias class3 -storepass "changeit"
+keytool -importcert -keystore ../../config/cacerts.jks -file jetty.crt -alias own -storepass "changeit"
+
+keytool -list -keystore ../../config/cacerts.jks -storepass "changeit"