diff options
Diffstat (limited to 'rpkid/rpki/rpkid_tasks.py')
| -rw-r--r-- | rpkid/rpki/rpkid_tasks.py | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/rpkid/rpki/rpkid_tasks.py b/rpkid/rpki/rpkid_tasks.py index 492876aa..8889aa64 100644 --- a/rpkid/rpki/rpkid_tasks.py +++ b/rpkid/rpki/rpkid_tasks.py @@ -624,6 +624,8 @@ class UpdateEECertificatesTask(AbstractTask): rpki.log.debug("Existing EE certificate for %s %s is no longer covered" % (req.gski, resources)) ee.revoke(publisher = publisher) + eku = (rpki.oids.id_kp_bgpsec_router,) if req.router_id else None + for ca_detail in covering: rpki.log.debug("No existing EE certificate for %s %s" % (req.gski, resources)) rpki.rpkid.ee_cert_obj.create( @@ -631,7 +633,8 @@ class UpdateEECertificatesTask(AbstractTask): subject_name = req.pkcs10.getSubject(), subject_key = req.pkcs10.getPublicKey(), resources = resources, - publisher = publisher) + publisher = publisher, + eku = eku) # Anything left is an orphan for ees in existing.values(): |