I looked around in Spark’s 2.9.0 source code and it seems to me that the keystore’s password for mutual auth certificates is hard-coded to "changeit’.
IIRC in the previous version of Spark we could configure this password in the PKI’s section. Why can we no longer configure this ?