This part, plus the part of "7.iii Specifies the keystore location where the certificates were imported" are vague.

From Jakub Scholz said:

The actually easiest way to connect would be to use the PKCS12 files directly:

• Extract the ca.p12 from the cluster CA cert secret
• Extract the password from the password file
• Configure it in the Kafka client:
  ssl.truststore.location=some-path/ca.p12
  ssl.truststore.password=
  ssl.truststore.type=PKCS12
• Extract the user.p12 from the user secret
• Extract the password for it from the password file
  ssl.keystore.location=some-path/user.p12
  ssl.keystore.password=
  ssl.keystore.type=PKCS12

Reported by: rhn-support-bihu

https://access.redhat.com/documentation/en-us/red_hat_amq/2020.q4/html/deploying_and_upgrading_amq_streams_on_openshift/deploy-verify_str#annotations:ffdc356b-b662-4d95-8e17-8b8acd73db9a