Puppet Class: mwv::hack

Defined in:
puppet/modules/mwv/manifests/hack.pp

Overview

Class: mwv::hack

FIXME bandaid for T292324 until upgrading to buster: remove the DST X3 root cert to avoid old openssl/gnutls erroring out for Let's Encrypt certs.



7
8
9
10
11
12
# File 'puppet/modules/mwv/manifests/hack.pp', line 7

class mwv::hack {
    exec { 'disable broken letsencrypt cert':
        command => 'sed -i \'/^mozilla\/DST_Root_CA_X3/s/^/!/\' /etc/ca-certificates.conf && sudo update-ca-certificates',
        onlyif  => 'grep \'^mozilla/DST_Root_CA_X3\' /etc/ca-certificates.conf',
    }
}