certificate must be in PEM format with .crt suffix

2025-02-09 00:02:17 +01:00
parent 48e3e1ea7d
commit 5fe15b7fd6
1 changed files with 1 additions and 1 deletions
--- a/roles/base/tasks/system_setup/import_stepca.yml
+++ b/roles/base/tasks/system_setup/import_stepca.yml
@@ -7,7 +7,7 @@
  - name: base | system setup | get step-ca certificate
    get_url:
      url: "https://step-ca.universe.local/roots.pem"
-      dest: "/usr/local/share/ca-certificates/"
+      dest: "/usr/local/share/ca-certificates/step-ca.crt"
      validate_certs: false

  - name: base | system setup | import step-ca certificate