private void createRegion() {
    String connectToLocatorCommand = String.join(" ",
        "connect",
        "--use-http",
        "--use-ssl",
        "--url=https://localhost:" + locatorHttpPort + "/geode-mgmt/v1",
        "--security-properties-file=" + clusterSecurityProperties);

    String createRegionCommand = String.join(" ",
        "create region",
        "--name=" + regionName,
        "--type=REPLICATE");

    gfshRule.execute(connectToLocatorCommand, createRegionCommand);
  }
This test verifies that rotating to an untrusted certificate causes an exception when the
client tries to form a new secure connection. This is a sanity check that certificates are
being dynamically updated.
geode-assembly/src/acceptanceTest/java/org/apache/geode/ssl/CertificateRotationTest.java