From 67f18bb0f5802f97a117736208027918be5f7ce5 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Wed, 17 Apr 2013 02:04:50 +0000 Subject: Oops, reissuing a child certificate works better when we remember to use the new expiration date. See #512. svn path=/trunk/; revision=5298 --- rpkid/rpki/rpkid_tasks.py | 1 + 1 file changed, 1 insertion(+) (limited to 'rpkid/rpki/rpkid_tasks.py') diff --git a/rpkid/rpki/rpkid_tasks.py b/rpkid/rpki/rpkid_tasks.py index 5b1874b2..f735f0f7 100644 --- a/rpkid/rpki/rpkid_tasks.py +++ b/rpkid/rpki/rpkid_tasks.py @@ -266,6 +266,7 @@ class UpdateChildrenTask(AbstractTask): elif old_resources != new_resources or (old_resources.valid_until < self.rsn and irdb_resources.valid_until > self.now): rpki.log.debug("Need to reissue child %s certificate SKI %s" % (self.child.child_handle, child_cert.cert.gSKI())) + new_resources.valid_until = irdb_resources.valid_until child_cert.reissue( ca_detail = ca_detail, resources = new_resources, -- cgit v1.2.3