aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2013-04-17 02:04:50 +0000
committerRob Austein <sra@hactrn.net>2013-04-17 02:04:50 +0000
commit67f18bb0f5802f97a117736208027918be5f7ce5 (patch)
treef4dd46f500a48a52f5fdf7996d1bb380a35e4e3a
parentf284e73a913b71bc6fccd609c145e3d9d14dce2f (diff)
Oops, reissuing a child certificate works better when we remember to
use the new expiration date. See #512. svn path=/trunk/; revision=5298
-rw-r--r--rpkid/rpki/rpkid_tasks.py1
1 files changed, 1 insertions, 0 deletions
diff --git a/rpkid/rpki/rpkid_tasks.py b/rpkid/rpki/rpkid_tasks.py
index 5b1874b2..f735f0f7 100644
--- a/rpkid/rpki/rpkid_tasks.py
+++ b/rpkid/rpki/rpkid_tasks.py
@@ -266,6 +266,7 @@ class UpdateChildrenTask(AbstractTask):
elif old_resources != new_resources or (old_resources.valid_until < self.rsn and irdb_resources.valid_until > self.now):
rpki.log.debug("Need to reissue child %s certificate SKI %s" % (self.child.child_handle, child_cert.cert.gSKI()))
+ new_resources.valid_until = irdb_resources.valid_until
child_cert.reissue(
ca_detail = ca_detail,
resources = new_resources,