Merge "Extract local CA if it expired" into stable/newton

2018-03-22 01:02:00 +00:00 · 2018-03-22 01:02:00 +00:00 · af811cc166
parent b83cc42da9 712df442f3
commit af811cc166
1 changed files with 1 additions and 1 deletions
--- a/manifests/certmonger/ca/local.pp
+++ b/manifests/certmonger/ca/local.pp
@ -31,7 +31,7 @@ class tripleo::certmonger::ca::local(
  exec { 'extract-and-trust-ca':
    command   => "${extract_cmd} && ${trust_ca_cmd}",
    path      => '/usr/bin',
-    creates   => $ca_pem,
+    unless    => "test -e ${ca_pem} && openssl x509 -checkend 0 -noout -in ${ca_pem}",
    tries     => 5,
    try_sleep => 1,
    require   => Service['certmonger'],