title: Should server certificates be added to the trust store for the client to receive the response from the server securely?
body: <p><em><strong>Requirment:</em></strong>
  Need to write a web service client to interact with server using the SSL encryption.</p>
  
  <p><em><strong>Provided:</em></strong> 
  provided with the key store file and the server cert.</p>
  
  <p><em><strong>Coding:</em></strong>
  Have written a java code, forming the soap request.For adding(signing the soap) the encryption data, used the key store to get the public key using the certificates and encrypted with digital signature algorithm.</p>
  
  <p><em><strong>Assumption In steps:</em></strong></p>
  
  <ol>
  <li>signing the soap message using the key store and sending to the server.</li>
  <li>trust store(with certificates) by Certified authority validates the request and process the request.</li>
  <li>signing the response with the same key store(used by the client) in the server side to send to the client.</li>
  <li>client receives the response and validates using the trust store(with certificates) by Certified authority in the <code>/JAVA_HOME/jre/lib/security/cacerts</code>.</li>
  </ol>
  
  <p>In this case, do we need to import the <strong>server.cert</strong> file from the requirement to the /JAVA_HOME/jre/lib/security/cacerts.?</p>
  
  <p>from which the response is validated?</p>
  
  <p>Please correct me if i am wrong at any step.</p>