Spark 2.8.0 - invalid username/password

the certificate is also used for TLS, the old SSL method shouldn’t be used anyway.

I think latest Openfire generates certificates and enables TLS by default. You can check any Store. It’s the same in default configuration. Or check XMPP clients one.