Secure hdfs setup not idempotent due to incorrect keystore path

[cartershanklin]

[root@nn ssl-ca]# keytool -list -alias horton-ca -keystore /usr/java/default/jre/lib/security/cacerts -storepass changeit keytool error: java.lang.Exception: Alias does not exist [root@nn ssl-ca]# keytool -importcert -noprompt -alias horton-ca -keystore /usr/lib/jvm/java/jre/lib/security/cacerts -storepass changeit keytool error: java.lang.Exception: Certificate not imported, alias already exists

Correct path is /etc/pki/java/cacerts

Note that

[root@nn ssl-ca]# ls -l /usr/lib/jvm/java/jre/lib/security/ total 40 lrwxrwxrwx 1 root root 41 Sep 10 02:28 cacerts -> ../../../../../../../etc/pki/java/cacerts