MuleSoft Developer 2 Certification Practice Exam

In TLS the keystore holds your own private key and certificate, while the truststore contains certificates you trust from others. If a TLS context has a keystore but no truststore, the side can present its certificate to others, but it cannot verify the other party's certificate because there’s no set of trusted roots to rely on. That means only one side is authenticated—the server to the client—so the connection runs in one-way TLS. Two-way (mutual) TLS would require the ability to verify the client as well, which needs a truststore.