Use "-v" in keystore -list. Java 7 will output SHA1 fingerprints by default, prior it was MD5. Otherwise certificate is re-imported on every Puppet run.
Use "-v" in keystore -list. Java 7 will output SHA1 fingerprints by default, prior it was MD5. Otherwise certificate is re-imported on every Puppet run.

arthurbarton/puppetlabs-java_ks,synyx/puppet-keytool