Enable TLS between Router and MP - custom keystore not being used

[pietjacobs]

I 'm trying to enable TLS between Routers and Message Processor by following the documentation. However when I restart the message processor (after having deleted the router configuration files), the certificate being presented by the Message Processor is not my custom self-signed certificate, but it's an autogenerated cert by Apigee (CN=apigee.com).

When checking the logs of the MP I can see the following:

2021-01-19 17:03:45,733  main INFO  c.a.u.h.SelfSignedKeystore - SelfSignedKeystore.generateSelfSignedKeystore() : Initializing generated keystore: /opt/apigee/message-processor_tmp_1419300215736522237.jks
2021-01-19 17:03:47,644  main INFO  c.a.u.h.SelfSignedKeystore - SelfSignedKeystore.createKeystore() : created keystore: /opt/apigee/message-processor_tmp_1419300215736522237.jks
2021-01-19 17:03:48,842  main INFO  A.HTTP.CONFIGURATION - MessageProcessorHttpSkeletonFactory.configureSSL() : Instantiating Keystore of type: JKS from the location: /opt/apigee/message-processor_tmp_1419300215736522237.jks

Anyone can point me to why it is refusing to use the cert from the keystore I provided in the configuration?

Thanks!

Extra:

Configuration file for the MP:

conf_message-processor-communication_local.http.ssl=true
conf/message-processor-communication.properties+local.http.port=8443
conf/message-processor-communication.properties+local.http.ssl.keystore.type=jks
conf/message-processor-communication.properties+local.http.ssl.keystore.path=/opt/apigee/customer/application/apigee-mp-1.jks
conf/message-processor-communication.properties+local.http.ssl.keyalias=apigee-mp-1
# Enter the obfuscated keystore password below.
conf/message-processor-communication.properties+local.http.ssl.keystore.password=OBF:obsPword