Remove CAs we no longer use from /etc/ssl/ca-debian/

diff --git a/modules/ssl/files/ca-certificates-debian.conf b/modules/ssl/files/ca-certificates-debian.conf
index b90fb8a..fc3661b 100644 (file)
--- a/modules/ssl/files/ca-certificates-debian.conf
+++ b/modules/ssl/files/ca-certificates-debian.conf
@@ -1,5 +1,3 @@
 # This file is under puppet control
 # Only the CAs for debian.org are trusted, see /etc/ssl/README
-mozilla/AddTrust_External_Root.crt
-mozilla/UTN_USERFirst_Hardware_Root_CA.crt
 mozilla/DST_Root_CA_X3.crt