Issue with SSL

Yes using the keystore is the right way to go: