title: Can I create a Java trust store without a password using keytool?
body: <p>I want to connect to a TLS server with a self-signed certificate, so I need a custom trust store. <code>keytool</code> seems to absolutely require a password in order to import the certificate, but I really don't need to password-protect the trust store. Using the standard password "changeit" will work, but it I'd prefer to have no password at all.</p>
  
  <p>Note that this is a "trust store" not a "key store", so there is no secret material in the trust store at all: just the server's certificate, so the client can authenticate that the server is trusted.</p>
  
  <p>Is this possible with <code>keytool</code>? Are there other tools that can remove the password from the trust store? Understanding that authenticating the trust store might actually have its uses, are there any specific reasons why I should <em>not</em> use a trust store without a password?</p>