From 08ba50b8fa45f6ed45b8da49468ea066d7d1f44c Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Fri, 13 Nov 2015 04:38:41 +0000 Subject: Clean up more gratuitous unused magic CRL autoregeneration. Regenerate EE certificates along with everything else when activating a new CADetail (ie, when rolling a CA key). svn path=/branches/tk705/; revision=6172 --- rpki/rpkid_tasks.py | 1 + 1 file changed, 1 insertion(+) (limited to 'rpki/rpkid_tasks.py') diff --git a/rpki/rpkid_tasks.py b/rpki/rpkid_tasks.py index 8d584f2f..5e2a28f6 100644 --- a/rpki/rpkid_tasks.py +++ b/rpki/rpkid_tasks.py @@ -550,6 +550,7 @@ class UpdateEECertificatesTask(AbstractTask): # This probably never happens, as the most likely cause would be a CA certificate # being revoked, which should trigger automatic clean up of issued certificates. logger.debug("%r: %r for %s %s is no longer covered", self, ee, gski, resources) + ca_details.add(ee.ca_detail) ee.revoke(publisher = publisher) subject_name = rpki.x509.X501DN.from_cn(r_pdu.get("cn"), r_pdu.get("sn")) -- cgit v1.2.3