From 2a0513f8f6987fadbcb1dd0e5207a4e80933f91a Mon Sep 17 00:00:00 2001
From: Paul Wise <pabs@debian.org>
Date: Sun, 3 Apr 2016 21:03:44 +0800
Subject: [PATCH] Also refresh ca-global when Debian certs change

---
 modules/ssl/manifests/init.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/ssl/manifests/init.pp b/modules/ssl/manifests/init.pp
index 6cead6fdf..9e900bec1 100644
--- a/modules/ssl/manifests/init.pp
+++ b/modules/ssl/manifests/init.pp
@@ -57,7 +57,7 @@ class ssl {
 		purge    => true,
 		recurse  => true,
 		force    => true,
-		notify   => Exec['refresh_normal_hashes'],
+		notify   => [ Exec['refresh_normal_hashes'], Exec['refresh_ca_global_hashes'] ],
 	}
 	file { '/etc/ssl/certs/README':
 		ensure => absent,
-- 
2.20.1