That's the code I entered. There's an issue with it: (null, null) should be (inputstream to the keystore, keystore password).
An example I found here
uses "password".
I found that I needed to set the password, which I did.
Now that I, in theory, have jumped through those hoops, the example earlier said
KeyStore trustStore = KeyStore.getInstance("pkcs12");
whereas the example just found (albeit from an earlier date) says
KeyStore keyStore = KeyStore.getInstance("jks");
This example
uses pkcs12.
That leaves me with a new error, one which comes before the authentication issue:
DerInputStream.getLength(): lengthTag=87, too big.
I am using the path to the ES keystore as the trustPath.
Google isn't very helpful on that error.