The value of CHALLENGE_RESPONSE_SECRET needs to be the value of "-alias" option from keytool, as follow:

keytool -genkey -alias AliasChallengeResponse -keystore key.jceks -keypass "PassWord" -storepass "PassWord" -storetype JCEKS

Main changes:

CHALLENGE_RESPONSE_SECRET = "AliasChallengeResponse"; -> hard coded.