mirror of
https://github.com/Icinga/icinga2.git
synced 2025-09-26 02:58:43 +02:00
RequestCertificateHandler(): renew agent cert on master if satellite wants it
ignoring that cert seems up-to-date. This is to process renewals needed to keep the CA up-to-date despite the leaf is already up-to-date.
This commit is contained in:
parent
ef50e5ac2a
commit
b43f1e7706
@ -105,6 +105,10 @@ Value RequestCertificateHandler(const MessageOrigin::Ptr& origin, const Dictiona
|
||||
uptodate = IsCertUptodate(root);
|
||||
}
|
||||
}
|
||||
} else {
|
||||
// A satellite wants us to renew an agent certificate + CA despite it seems up-to-date.
|
||||
// So just do it. There may be good reasons for it we don't know, e.g. see the if-then branch above.
|
||||
uptodate = false;
|
||||
}
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user