From cb2d75d6ae0a5619f2a389f973d447425f2ef362 Mon Sep 17 00:00:00 2001 From: Luca Filipozzi Date: Fri, 3 Jan 2014 16:36:56 +0000 Subject: [PATCH] manage /etc/ca-certificates.conf because gandi --- modules/ssl/manifests/init.pp | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/modules/ssl/manifests/init.pp b/modules/ssl/manifests/init.pp index 26c82252..e8d68a4f 100644 --- a/modules/ssl/manifests/init.pp +++ b/modules/ssl/manifests/init.pp @@ -7,6 +7,9 @@ class ssl { 'ssl-cert': ensure => installed, ; + 'ca-certificates': + ensure => installed, + ; } file { '/etc/ssl/servicecerts': @@ -90,4 +93,17 @@ class ssl { exec { 'c_rehash /etc/ssl/debian/certs': refreshonly => true, } + + exec { 'modify_ca_certificates_conf': + command => 'sed -i -e \'s#!mozilla/UTN_USERFirst_Hardware_Root_CA.crt#mozilla/UTN_USERFirst_Hardware_Root_CA.crt#\' /etc/ca-certificates.conf', + cwd => '/etc/ssl/certs', + onlyif => 'grep -Fqx \'!mozilla/UTN_USERFirst_Hardware_Root_CA.crt\' /etc/ca-certificates.conf', + notify => Exec['update_ca_certificates'] + } + exec { 'update_ca_certificates': + command => '/usr/sbin/update-ca-certificates', + cwd => '/etc/ssl/certs', + refreshonly => true + } + } -- 2.39.2