From 898648c8af141419259dd0f7370a5482e87392ad Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <adellam@isti.cnr.it>
Date: Tue, 19 Dec 2017 19:12:14 +0100
Subject: [PATCH] Add the Terena CA for personal certificates.

---
 .../files/infn-letsencrypt-ca.crt             | 29 +++++++++++++++++++
 .../tasks/install_external_ca_cert.yml        |  2 +-
 2 files changed, 30 insertions(+), 1 deletion(-)

diff --git a/ubuntu-deb-general/files/infn-letsencrypt-ca.crt b/ubuntu-deb-general/files/infn-letsencrypt-ca.crt
index 1df06a0e..e18069b3 100644
--- a/ubuntu-deb-general/files/infn-letsencrypt-ca.crt
+++ b/ubuntu-deb-general/files/infn-letsencrypt-ca.crt
@@ -99,3 +99,32 @@ R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5
 JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo
 Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ
 -----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/ubuntu-deb-general/tasks/install_external_ca_cert.yml b/ubuntu-deb-general/tasks/install_external_ca_cert.yml
index a2ed6e38..03a76e24 100644
--- a/ubuntu-deb-general/tasks/install_external_ca_cert.yml
+++ b/ubuntu-deb-general/tasks/install_external_ca_cert.yml
@@ -6,6 +6,6 @@
   notify: Update the CA bundle list
   tags: ca
 
-- name: Install a CA file that contains both the letsencrypt complete chain and the INFN CA certs
+- name: Install a CA file that contains both the letsencrypt complete chain, the INFN CA certs and the TERENA personal certs CA
   copy: src=infn-letsencrypt-ca.crt dest={{ pki_dir }}/infn-letsencrypt-ca.crt
   tags: ca