Revert "Update configuration for SSL ca-debian cert store"

[mirror/dsa-puppet.git] / modules / ssl / files / ca-certificates-debian.conf

diff --git a/modules/ssl/files/ca-certificates-debian.conf b/modules/ssl/files/ca-certificates-debian.conf
index a02c012..0c23a14 100644 (file)
--- a/modules/ssl/files/ca-certificates-debian.conf
+++ b/modules/ssl/files/ca-certificates-debian.conf
@@ -1,8 +1,5 @@
 # This file is under puppet control
 # Only the CAs for debian.org are trusted, see /etc/ssl/ca-debian/README
-
-# Let's Encrypt: used by almost all Debian machines
-mozilla/ISRG_Root_X1.crt
-
-# Gandi: used by *.alioth.d.o only
+mozilla/AddTrust_External_Root.crt
 mozilla/UTN_USERFirst_Hardware_Root_CA.crt
+mozilla/DST_Root_CA_X3.crt