From 2e53122794284bd36df0bf59b0b64bef2249b3f8 Mon Sep 17 00:00:00 2001
From: Matias Garcia Isaia <mgarcia@manas.tech>
Date: Tue, 5 Oct 2021 19:04:32 -0300
Subject: [PATCH] Cleanup expired Let's Encrypt CA

Let's Encrypt old Certificate Authority expired on Sept 30, 2021.
Most of InSTEDD's infra uses those certificates, so this patch
makes new certificates work again.
---
 Dockerfile        | 3 +++
 Dockerfile.dev    | 3 +++
 broker/Dockerfile | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 9aaed8680..a98a473ec 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,8 @@
 FROM ruby:2.3.8
 
+# Cleanup expired Let's Encrypt CA (Sept 30, 2021)
+RUN sed -i '/^mozilla\/DST_Root_CA_X3/s/^/!/' /etc/ca-certificates.conf && update-ca-certificates -f
+
 # Install dependencies
 RUN apt-get update && \
   DEBIAN_FRONTEND=noninteractive apt-get install -y \
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 690452838..4e2696212 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -1,5 +1,8 @@
 FROM ruby:2.3.8
 
+# Cleanup expired Let's Encrypt CA (Sept 30, 2021)
+RUN sed -i '/^mozilla\/DST_Root_CA_X3/s/^/!/' /etc/ca-certificates.conf && update-ca-certificates -f
+
 # Install dependencies
 RUN apt-get update && \
   DEBIAN_FRONTEND=noninteractive apt-get install -y \
diff --git a/broker/Dockerfile b/broker/Dockerfile
index 59cb71207..e60dcff4c 100644
--- a/broker/Dockerfile
+++ b/broker/Dockerfile
@@ -4,6 +4,9 @@ FROM erlang:17.5.6
 # (removes reference to jessie-updates repository)
 RUN sed -i '/jessie-updates/d' /etc/apt/sources.list
 
+# # Cleanup expired Let's Encrypt CA (Sept 30, 2021)
+RUN sed -i '/^mozilla\/DST_Root_CA_X3/s/^/!/' /etc/ca-certificates.conf && update-ca-certificates -f
+
 # Install dependencies
 RUN apt-get update && \
   DEBIAN_FRONTEND=noninteractive apt-get install -y libzmq3-dev sox libsox-fmt-mp3 festival postfix curl ruby && \