private void writeCertsToKeyStore(Path keyStoreFile, CertificateMaterial... certs)
      throws GeneralSecurityException, IOException {
    CertStores store = new CertStores("");
    for (int i = 0; i < certs.length; i++) {
      store.withCertificate(String.valueOf(i), certs[i]);
    }
    store.createKeyStore(keyStoreFile.toAbsolutePath().toString(), dummyStorePass);
  }
This test verifies that rotating to an untrusted certificate causes an exception when the
client tries to form a new secure connection. This is a sanity check that certificates are
being dynamically updated.
geode-assembly/src/acceptanceTest/java/org/apache/geode/ssl/CertificateRotationTest.java