From f5916e26a263014cfd37db5e9ad8263736c33c69 Mon Sep 17 00:00:00 2001 From: Doug Burks Date: Mon, 7 Sep 2020 04:42:11 -0400 Subject: [PATCH] read ca.crt from filesystem when possible --- salt/ssl/init.sls | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls index 70d4c4b6a..733deed92 100644 --- a/salt/ssl/init.sls +++ b/salt/ssl/init.sls @@ -8,7 +8,7 @@ {% set CUSTOM_FLEET_HOSTNAME = salt['pillar.get']('global:fleet_custom_hostname', None) %} {% if grains.id.split('_')|last in ['manager', 'eval', 'standalone', 'import'] %} - {% set trusttheca_text = salt['mine.get'](grains.id, 'x509.get_pem_entries')[grains.id]['/etc/pki/ca.crt']|replace('\n', '') %} + {% set trusttheca_text = salt['cmd.shell']('cat /etc/pki/ca.crt')|replace('\n','') %} {% set ca_server = grains.id %} {% else %} {% set x509dict = salt['mine.get']('*', 'x509.get_pem_entries') %}