Fixes #37695 - Prevent server ca from being overwritten with default ca

theforeman · Sep 6, 2024 · 23d951d · 23d951d
1 parent b8f970c
commit 23d951d
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/manifests/ca.pp b/manifests/ca.pp
@@ -55,11 +55,12 @@
     }
   } else {
     file { $server_ca_path:
-      ensure => file,
-      source => "${certs::ssl_build_dir}/${default_ca_name}.crt",
-      owner  => 'root',
-      group  => 'root',
-      mode   => '0644',
+      ensure  => file,
+      source  => "${certs::ssl_build_dir}/${default_ca_name}.crt",
+      owner   => 'root',
+      group   => 'root',
+      mode    => '0644',
+      replace => false,
     }
   }