This PR adds a parameter to make generating archive requests from an ENC easier.
Thank you for contributing to this project!
Replace this comment with a description of your pull request.
Replace this comment with the list of issues or n/a.
The Windows Puppet agent fails to download archive resources due to SSL validation failure when the "source" is using a certificate issued by a private CA. The failure occurs even when the Puppet agent is configured with a custom "ssltruststore" that contains the CA chain.
This patch changes the Windows download behavior by defining the following order for the SSL trust store:
1. The "ssltruststore" setting from the "agent" section of "puppet.conf"
2. The "SSLCERTFILE" value from the runtime environment
3. The module-bundled ".pem" file as a last resort.
Fixes issue reported at: https://tickets.puppetlabs.com/browse/PUP-11349