Always update the ca-certificates package.

2021-10-08 13:41:21 +02:00 · 2021-10-08 13:41:21 +02:00 · 0a7b083761
parent bc8fd9bc9b
commit 0a7b083761
1 changed files with 5 additions and 2 deletions
--- a/tasks/trusted_ca.yml
+++ b/tasks/trusted_ca.yml
@ -47,8 +47,11 @@

 - name: Manage optional CA files on deb
  block:
-  - name: Ensure that ca-certificates is installed
-    apt: pkg=ca-certificates state=present cache_valid_time=1800
+  - name: Ensure that ca-certificates is installed and up to date
+    apt:
+      pkg: ca-certificates
+      state: latest
+      cache_valid_time: 1800

  - name: Get the CA files that we want to trust on deb
    get_url: url={{ item.ca_url }} dest={{ trusted_ca_deb_path }}/{{ item.ca }} owner=root group=root mode='0444'