Skip to content

Commit ffd3db1

Browse files
committed
Fixes #9699: Check for nssdb creation before running certutil.
Switches to checking for the nssb execute that creates the actual database instead of just the directory that contains them. This prevents the following error on EL6: certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an unsupported format.
1 parent c7ce6c2 commit ffd3db1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

manifests/ssltools/certutil.pp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# type to append cert to nssdb
22
define certs::ssltools::certutil($nss_db_dir, $client_cert, $cert_name=$title, $refreshonly = true) {
3-
File[$nss_db_dir] ->
3+
Exec['create-nss-db'] ->
44
exec { "delete ${cert_name}":
55
path => ['/bin', '/usr/bin'],
66
command => "certutil -D -d ${nss_db_dir} -n '${cert_name}'",

0 commit comments

Comments
 (0)