The instructions for creating and configuring keystores and truststores using the OpenSSL command line tool are described in
Managing Certificate Files with
OpenSSL. Note, however, that you can create and configure
Broker keystores and truststores using any certificate editing tool that works with PKCS#12 or PEM certificate formats.