mkdir -p /opt/cloudera/security/x509/ /opt/cloudera/security/jks/
sudo chown -R cloudera-scm:cloudera-scm /opt/cloudera/security/jks
#sudo umask 0700
cd /opt/cloudera/security/jks
keytool -genkeypair -alias cmhost -keyalg RSA -keysize 2048 -dname "cn=cm01.example.com, ou=Department,
o=Company, l=City, st=State, c=US" -keypass password -keystore example.jks -storepass password
# PKCS 변환
openssl pkcs12 -export -in haedongg.net.crt -inkey haedongg.net.key -out haedongg.net.p12 -name haedongg
# jks import
keytool -importkeystore \
-destkeystore haedongg.net.jks \
-srckeystore haedongg.net.12 \
-srcstoretype PKCS12 \
-alias haedongg
sudo cp $JAVA_HOME/jre/lib/security/cacerts $JAVA_HOME/jre/lib/security/jssecacerts
sudo cp $JAVA_HOME/jre/lib/security/cacerts $JAVA_HOME/jre/lib/security/jssecacerts
cp selfsigned.cer /opt/cloudera/security/x509/cmhost.pem
keytool -import -alias cmhost -file /opt/cloudera/security/jks/selfsigned.cer
-keystore $JAVA_HOME/jre/lib/security/jssecacerts -storepass changeit
mv /opt/cloudera/security/jks/example.jks /opt/cloudera/security/jks/cmhost-keystore.jks
rm /opt/cloudera/security/jks/selfsigned.cer
&nbap;
keytool -list -keystore KEYSTORE_FILENAME.jks -v