diff options
author | Chris St. Pierre <chris.a.st.pierre@gmail.com> | 2012-08-27 13:42:47 -0400 |
---|---|---|
committer | Chris St. Pierre <chris.a.st.pierre@gmail.com> | 2012-08-27 13:42:47 -0400 |
commit | fc5478ecab025e23e69403547b0bd1706bcfc187 (patch) | |
tree | 1ab39ece2fe932a7415480b647169178003d0fe6 | |
parent | fde8bdfdfbe77e1bcd714b45dc443dcd9eb7cb7c (diff) | |
download | bcfg2-fc5478ecab025e23e69403547b0bd1706bcfc187.tar.gz bcfg2-fc5478ecab025e23e69403547b0bd1706bcfc187.tar.bz2 bcfg2-fc5478ecab025e23e69403547b0bd1706bcfc187.zip |
SSLCA: removed redundant verify_certs option
-rw-r--r-- | src/lib/Bcfg2/Server/Plugins/SSLCA.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/Bcfg2/Server/Plugins/SSLCA.py b/src/lib/Bcfg2/Server/Plugins/SSLCA.py index a1a278da0..9293fc978 100644 --- a/src/lib/Bcfg2/Server/Plugins/SSLCA.py +++ b/src/lib/Bcfg2/Server/Plugins/SSLCA.py @@ -173,7 +173,8 @@ class SSLCA(Bcfg2.Server.Plugin.GroupSpool): Bcfg2.Server.Plugin.bind_info(entry, metadata) def verify_cert(self, filename, key_filename, entry): - do_verify = self.CAs[self.cert_specs[entry.get('name')]['ca']].get('verify_certs', True) + ca = self.CAs[self.cert_specs[entry.get('name')]['ca']] + do_verify = ca.get('chaincert') if do_verify: return (self.verify_cert_against_ca(filename, entry) and self.verify_cert_against_key(filename, key_filename)) |