2
0
mirror of https://github.com/xcat2/confluent.git synced 2026-05-07 17:27:16 +00:00

Backport cert fix

This commit is contained in:
Jarrod Johnson
2026-05-05 16:26:49 -04:00
parent dcb6aeca65
commit d6e3c7e837
+3 -3
View File
@@ -284,11 +284,11 @@ class TLSCertVerifier(object):
storedprint = self.cfm.get_node_attributes(self.node, (self.fieldname,)
)
storedprint = storedprint.get(self.node, {}).get(self.fieldname, {}).get('value', '')
newpolicy = self.cfm.get_node_attributes(self.node,
('pubkeys.addpolicy',))
newpolicy = newpolicy.get(self.node, {}).get('pubkeys.addpolicy', {}).get('value', '')
if not storedprint:
# no stored value, check policy for next action
newpolicy = self.cfm.get_node_attributes(self.node,
('pubkeys.addpolicy',))
newpolicy = newpolicy.get(self.node, {}).get('pubkeys.addpolicy', {}).get('value', '')
if newpolicy == 'manual':
# manual policy means always raise unless a match is set
# manually