X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fssl%2Ffiles%2Fca-certificates-debian.conf;h=b90fb8a69d0d9ca10621d14f4ee7be2d9ebf1237;hb=5028fc174272505418f160948012acba070345be;hp=a02c012942a7e7cf1da324ae291b89f6ed472d90;hpb=f35f47969e10aeeaf6a48ad2a0f4dbde1f2f9de3;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ssl/files/ca-certificates-debian.conf b/modules/ssl/files/ca-certificates-debian.conf
index a02c01294..b90fb8a69 100644
--- a/modules/ssl/files/ca-certificates-debian.conf
+++ b/modules/ssl/files/ca-certificates-debian.conf
@@ -1,8 +1,5 @@
 # This file is under puppet control
-# Only the CAs for debian.org are trusted, see /etc/ssl/ca-debian/README
-
-# Let's Encrypt: used by almost all Debian machines
-mozilla/ISRG_Root_X1.crt
-
-# Gandi: used by *.alioth.d.o only
+# Only the CAs for debian.org are trusted, see /etc/ssl/README
+mozilla/AddTrust_External_Root.crt
 mozilla/UTN_USERFirst_Hardware_Root_CA.crt
+mozilla/DST_Root_CA_X3.crt