netty websocket ssl Received fatal alert：certificate_unknown

server:
  port: 8080
  ssl:
    key-store: classpath:mystore.jks
    key-store-password: 1234567
    key-store-type: JKS
#    key-alias: server
    enabled: true

@Override
protected void initChannel(SocketChannel ch) throws Exception {
    if (openssl){ //true
            SSLEngine sslEngine = getServerSslContext().createSSLEngine();
            sslEngine.setNeedClientAuth(false);
            sslEngine.setUseClientMode(false);
            SslHandler sslHandler = new SslHandler(sslEngine);
            ch.pipeline().addLast(sslHandler);
    }
    ch.pipeline().addLast("http-codec", new HttpServerCodec()); // HTTP编码解码器
    ch.pipeline().addLast("aggregator", new HttpObjectAggregator(65536)); // 把HTTP头、HTTP体拼成完整的HTTP请求
    ch.pipeline().addLast("http-chunked", new ChunkedWriteHandler()); // 方便大文件传输，不过实质上都是短的文本数据
    ch.pipeline().addLast("websocket-handler",webSocketServerHandler);
    ch.pipeline().addLast("http-handler",websocketNettyRequestHandler);
}
 
 
public SSLContext getServerSslContext() throws Exception {
 
    DefaultResourceLoader resourceLoader = new DefaultResourceLoader();
    org.springframework.core.io.Resource resource = resourceLoader.getResource("classpath:mystore.jks"); 
    InputStream inputStream = resource.getInputStream();
 
    log.info("加载了密码: {}", sslPassword);
 
    char[] passArray = sslPassword.toCharArray();
    SSLContext sslContext = SSLContext.getInstance("SSLv3");
    KeyStore ks = KeyStore.getInstance("JKS");
    //加载keytool 生成的文件
    ks.load(inputStream, passArray);
    KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
    kmf.init(ks, passArray);
    sslContext.init(kmf.getKeyManagers(), null, null);
    inputStream.close();
    return sslContext;
}