From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 29 Nov 2014 12:21:51 +0000 (+0100)
Subject: We need to trust an entire CA :(
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=190141f23da1499f30a680f5f00412326deace0d;hp=f7b6563588cf8a5395f155c1b225d2e96e77e02d;p=mirror%2Fdsa-puppet.git

We need to trust an entire CA :(
---

diff --git a/modules/buildd/manifests/init.pp b/modules/buildd/manifests/init.pp
index d54057176..877927967 100644
--- a/modules/buildd/manifests/init.pp
+++ b/modules/buildd/manifests/init.pp
@@ -53,12 +53,11 @@ class buildd ($ensure=present) {
 
 	if ($::lsbmajdistrelease >= 8) {
 		file { '/etc/apt/apt.conf.d/puppet-https-buildd':
-			ensure => absent,
+			content => "Acquire::https::buildd.debian.org::CaInfo \"/usr/share/ca-certificates/mozilla/UTN_USERFirst_Hardware_Root_CA.crt\";\n",
 		}
 	} else {
 		file { '/etc/apt/apt.conf.d/puppet-https-buildd':
 			content => "Acquire::https::buildd.debian.org::CaInfo \"/etc/ssl/servicecerts/buildd.debian.org.crt\";\n",
-			#require => File['/etc/ssl/certs/buildd.debian.org.crt']
 		}
 	}
 	site::aptrepo { 'buildd.debian.org-proposed':