From 190141f23da1499f30a680f5f00412326deace0d Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Sat, 29 Nov 2014 13:21:51 +0100 Subject: [PATCH] We need to trust an entire CA :( --- modules/buildd/manifests/init.pp | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/modules/buildd/manifests/init.pp b/modules/buildd/manifests/init.pp index d54057176..877927967 100644 --- a/modules/buildd/manifests/init.pp +++ b/modules/buildd/manifests/init.pp @@ -53,12 +53,11 @@ class buildd ($ensure=present) { if ($::lsbmajdistrelease >= 8) { file { '/etc/apt/apt.conf.d/puppet-https-buildd': - ensure => absent, + content => "Acquire::https::buildd.debian.org::CaInfo \"/usr/share/ca-certificates/mozilla/UTN_USERFirst_Hardware_Root_CA.crt\";\n", } } else { file { '/etc/apt/apt.conf.d/puppet-https-buildd': content => "Acquire::https::buildd.debian.org::CaInfo \"/etc/ssl/servicecerts/buildd.debian.org.crt\";\n", - #require => File['/etc/ssl/certs/buildd.debian.org.crt'] } } site::aptrepo { 'buildd.debian.org-proposed': -- 2.20.1