EL9 distrust-dir changed from backlist to blocklist

voxpupuli · Jun 5, 2024 · 41381ed · 41381ed
1 parent 225f641
commit 41381ed
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/data/RedHat-family-9.yaml b/data/RedHat-family-9.yaml
@@ -0,0 +1,2 @@
+---
+ca_cert::distrusted_cert_dir: '/etc/pki/ca-trust/source/blocklist'
diff --git a/spec/acceptance/ca_cert_ca_spec.rb b/spec/acceptance/ca_cert_ca_spec.rb
@@ -9,7 +9,11 @@
 when 'RedHat'
   trusted_ca_file_remote = '/etc/pki/ca-trust/source/anchors/DigiCert_G5_TLS_ECC_SHA384_2021_CA1.crt'
   trusted_ca_file_text = '/etc/pki/ca-trust/source/anchors/InCommon.crt'
-  untrusted_ca_file_remote = '/etc/pki/ca-trust/source/blacklist/DigiCert_Global_Root_G3.crt'
+  if host_inventory['facter']['os']['release']['major'] < '9'
+    untrusted_ca_file_remote = '/etc/pki/ca-trust/source/blacklist/DigiCert_Global_Root_G3.crt'
+  else
+    untrusted_ca_file_remote = '/etc/pki/ca-trust/source/blocklist/DigiCert_Global_Root_G3.crt'
+  end
   ca_certificates_bundle = '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem'
 when 'Archlinux'
   trusted_ca_file_remote = '/etc/ca-certificates/trust-source/anchors/DigiCert_G5_TLS_ECC_SHA384_2021_CA1.crt'
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		---
		ca_cert::distrusted_cert_dir: '/etc/pki/ca-trust/source/blocklist'