From d3d734d5c9f64477cf53437e5599a57a0fa36b55 Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@debian.org>
Date: Sat, 19 Mar 2016 16:19:44 +0100
Subject: [PATCH] Temporarily disable TLSA for packages.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>
---
 modules/roles/manifests/init.pp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index 31c1650c9..3227a6e3c 100644
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -244,6 +244,7 @@ class roles {
 	if has_role('packages') {
 		ssl::service { 'packages.debian.org':
 			notify => Service['apache2'],
+			tlsaport => [],
 		}
 	}
 
-- 
2.20.1