We are also facing some issues with truststore password.
One thing that looks strange is that the Jira ticket clearly states that sonar is still supported as a fallback:
Let’s change the default to
changeitlike in the default JRE truststore, and keep supportingsonaras a fallback for backward compatibility