Maybe somone can explain what Apple’s idea of changing the keystore password from “changeit” to a radically different and cryptographically strong “changeme” is, except for the obvious goal of wasting my time having to google for it.

So yeah, here’s how you import that self-signed certificate that you need:

sudo keytool -import -alias some.host.com -keystore /System/Library/Frameworks/JavaVM.framework/Versions/1.6/Home/lib/security/cacerts -file mycert.crt