From 4e521564a9d7c147cd400b6c03ed987f14eb44fc Mon Sep 17 00:00:00 2001
From: Lars Beckers <lars.beckers@rwth-aachen.de>
Date: Sun, 15 Oct 2017 17:18:51 +0200
Subject: [PATCH] tsm-client: add cert anchor for tls secured backups

---
 tsm-client/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tsm-client/tasks/main.yml b/tsm-client/tasks/main.yml
index c3f9ff3..48afba9 100644
--- a/tsm-client/tasks/main.yml
+++ b/tsm-client/tasks/main.yml
@@ -48,3 +48,10 @@
     - tsm
     - config
 
+- name: ensure tls anchor certificate is configured
+  command: dsmcert -add -server "T-TeleSec GlobalRoot Class 2" -file /etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem
+  args:
+    creates: IBM/SpectrumProtect/certs/dsmcert.sth
+  tags:
+    - tsm
+    - config
-- 
GitLab