Due to Letsencrypt CA cert change, many https:// template url may not work with 4.16 systemvmtemplate

[yadvr]

The ca-certificates and ca-certificates-java pkg in systemvmtemplate for 4.16.1 may need to be updated (checked doesn't seem there's new release for Debian bullseye/11).

Due to Letsencrypt CA cert change, many https:// template url may not work with 4.16 systemvmtemplate
Alternatively, the cert may need to be manually installed/bundled when creating the systemvmtemplate.

ISSUE TYPE

• Bug Report

COMPONENT NAME

Templates, systemvmtemplate

CLOUDSTACK VERSION

4.16

[yadvr]

The workaround is to use http:// URL with checksums when using letsenrypt enabled hosts where a template exists. This issue is also hit for download.cloudstack.org cc @wido @GabrielBrascher @nvazquez @sureshanaparti @weizhouapache

[yadvr]

cc @Pearl1594 pl check if in 4.16.1 systemvmtemplate, we can get the template to have the latest letsencrypt CA cert as a lot of servers use and host templates on letsencrypt based SSL/TLS certs.

[yadvr]

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

[yadvr]

Tracking further in the PR #5863