esgf-ansible using out-of-date trust sources #151
Description
The following files which are part of the esgf-ansible release, are out-of-date and need to be urgently replaced with the latest versions available.
- esg_trusted_certificates.tar
- esg-truststore.ts
- esgf-ca-bundle.crt
The versions currently being served have several certificates which are already expired, and don't contain the replacements to these expired certificates. This causes globus transfers to fail for sites using certificates issued by the CAs whose certificates are no longer current in the ESGF trust served by esgf-ansible.
The updated files to replace these are found here:
https://github.com/ESGF/esgf-dist/tree/master/installer/certs