Drop usage of 'update-ca-trust force-enable'

... because the subcommand does not exist actually. The command fails
with the following error in recent CentOS Stream 9.

```
Error: Unknown command: force-enable

Usage: /usr/bin/update-ca-trust [extract] [-o DIR|--output=DIR]

Update the system trust store in /etc/pki/ca-trust/extracted.

COMMANDS
(absent/empty command): Same as the extract command described below.

extract: Instruct update-ca-trust to scan the source configuration in
/usr/share/pki/ca-trust-source and /etc/pki/ca-trust/source and produce
updated versions of the consolidated configuration files stored below
the /etc/pki/ca-trust/extracted directory hierarchy.

EXTRACT OPTIONS
-o DIR, --output=DIR: Write the extracted trust store into the given
directory instead of updating /etc/pki/ca-trust/extracted.
```

Change-Id: I38bbfc08a73823d2fd6e00974e277130cbff7e12
This commit is contained in:
Takashi Kajinami 2024-08-21 14:00:06 +09:00
parent 44a10e9968
commit fe9a9105cb

View File

@ -4,7 +4,7 @@ class openstack_integration::params {
'RedHat': {
$ca_bundle_cert_path = '/etc/ssl/certs/ca-bundle.crt'
$cert_path = '/etc/pki/ca-trust/source/anchors/puppet_openstack.pem'
$update_ca_certs_cmd = '/usr/bin/update-ca-trust force-enable && /usr/bin/update-ca-trust extract'
$update_ca_certs_cmd = '/usr/bin/update-ca-trust extract'
$mysql_charset = 'utf8'
$mysql_collate = 'utf8_general_ci'
$mysql_conf_dir = '/etc/my.cnf.d'