andsens/ec2debian-build-ami — pull request #56 by tmatilai (2013-02-27 02:14:50+00:00)
Title: Install ca-certificates package

Earlier (as in AMIs for v6.0.6) we installed curl, which also pulled in ca-certificates.

Now we install only wget which does not even transitionally depend on it. But without CA certificates, we can not practically download SSL protected content. This is a problem for example when bootstrapping configuration management systems etc.

I can handle this in [knife-solo](http://matschaffer.github.com/knife-solo/) as it detects the OS and distro, but the generic bootstrap template for Chef just downloads an installer script (using https in the future).

IMHO CA certificates should be installed by default as more and more content is behind SSL (which is a good thing!). Other opinions?

/cc @JamesBromberger as I understood you built the latest AMIs.