From cf69dcff767abadf7d8f7c7fc625bc4f79a87514 Mon Sep 17 00:00:00 2001
From: Rene Mewissen <rene@tantooine.myfirewall.org>
Date: Sat, 21 Dec 2024 00:09:10 +0100
Subject: [PATCH] we de not trust the ca yet

---
 roles/base/tasks/system_setup/import_stepca.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/base/tasks/system_setup/import_stepca.yml b/roles/base/tasks/system_setup/import_stepca.yml
index a7e6bc5..ad7e701 100644
--- a/roles/base/tasks/system_setup/import_stepca.yml
+++ b/roles/base/tasks/system_setup/import_stepca.yml
@@ -3,10 +3,11 @@
     get_url:
       url: "https://step-ca.universe.local/roots.pem"
       dest: "/etc/ca-certificates/trust-source/anchors/"
+      validate_certs: false
 
   - name: base | system setup | import step-ca certificate
     command:
       cmd: "update-ca-trust"
   become: yes
   rescue:
-    - set_fact: task_failed=true
\ No newline at end of file
+    - set_fact: task_failed=true