diff options
| author | Rob Austein <sra@hactrn.net> | 2007-10-07 05:36:05 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2007-10-07 05:36:05 +0000 |
| commit | 1d8d714d076024c300a37bf8fdcd401dee4d04c3 (patch) | |
| tree | 8bfd57820e5a547cf2277fe90f56b5ad2196d242 /scripts | |
| parent | 575da9018b1722fe57ba986e67412c34ba83b7ce (diff) | |
Checkpoint
svn path=/scripts/rpki/sql.py; revision=1110
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/rpki/sql.py | 17 |
1 files changed, 8 insertions, 9 deletions
diff --git a/scripts/rpki/sql.py b/scripts/rpki/sql.py index beec78ab..edff706b 100644 --- a/scripts/rpki/sql.py +++ b/scripts/rpki/sql.py @@ -200,15 +200,14 @@ class ca_obj(sql_persistant): - Other cases I've forgotten? """ - # For the moment this engine never requests subset certs (req_* - # attributes in issue request) so it's safe to assume that there - # are no subset certs to deal with. That should simplify our task. - - # This looks like yet another place where a ca_detail.ski column - # could be useful. - ca_details = ca_detail_obj.sql_fetch_where(gctx, "ca_id = %s", ca.ca_id) - - raise NotImplementedError + cert_map = dict((c.get_SKI(), c) for c in rc.certs) + for ca_detail in ca_detail_obj.sql_fetch_where(gctx, "ca_id = %s AND latest_ca_cert IS NOT NULL", ca.ca_id): + ski = ca_detail.latest_ca_cert.get_SKI() + assert ski in cert_map, "Certificate in our database missing from list_response, SKI %s" % ":".join(("%02X" % ord(i) for i in ski)) + if ca_detail.latest_ca_cert != cert_map[ski]: + ca_detail.update_latest_ca_cert(cert_map[ski]) + del cert_map[ski] + assert not cert_map, "Certificates in list_response missing from our database, SKIs %s" % " ".join(":".join("%02X" % ord(i) for i in j) for j in cert_map.keys()) @classmethod def create(cls, gctx, parent, rc): |