chef: Remove ancient verisign 1024 root cert

openstreetmap · Nov 28, 2023 · 80c0715 · 80c0715
1 parent 7f055e6
commit 80c0715
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 25 deletions.
diff --git a/cookbooks/chef/recipes/default.rb b/cookbooks/chef/recipes/default.rb
@@ -102,17 +102,9 @@
   mode "644"
 end
 
-directory "/etc/chef/trusted_certs" do
-  owner "root"
-  group "root"
-  mode "755"
-end
-
-template "/etc/chef/trusted_certs/verisign.pem" do
-  source "verisign.pem.erb"
-  owner "root"
-  group "root"
-  mode "644"
+# Remove the ancient verisign certificate workaround
+file "/etc/chef/trusted_certs/verisign.pem" do
+  action :delete
 end
 
 directory node[:ohai][:plugin_dir] do

diff --git a/cookbooks/chef/templates/default/verisign.pem.erb b/cookbooks/chef/templates/default/verisign.pem.erb