# -*- coding: utf-8 -*-
# vim: ft=yaml
---

#/usr/local/share/ca-certificates:
#  file.directory

/etc/pki/intca.crt:
  x509.pem_managed:
    - text: {{ salt['mine.get']('salt.chaos', 'x509.get_pem_entries')['salt.chaos']['/etc/pki/ca.crt']|replace('\n', '') }}

/etc/ssl/certs/intca.crt:
  x509.pem_managed:
    - text: {{ salt['mine.get']('salt.chaos', 'x509.get_pem_entries')['salt.chaos']['/etc/pki/ca.crt']|replace('\n', '') }}

    
/usr/sbin/update-ca-certificates:
  cmd.run:
    - onchanges:
      - x509: /etc/ssl/certs/intca.crt