From fc5478ecab025e23e69403547b0bd1706bcfc187 Mon Sep 17 00:00:00 2001 From: "Chris St. Pierre" Date: Mon, 27 Aug 2012 13:42:47 -0400 Subject: SSLCA: removed redundant verify_certs option --- src/lib/Bcfg2/Server/Plugins/SSLCA.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src/lib/Bcfg2/Server/Plugins/SSLCA.py') diff --git a/src/lib/Bcfg2/Server/Plugins/SSLCA.py b/src/lib/Bcfg2/Server/Plugins/SSLCA.py index a1a278da0..9293fc978 100644 --- a/src/lib/Bcfg2/Server/Plugins/SSLCA.py +++ b/src/lib/Bcfg2/Server/Plugins/SSLCA.py @@ -173,7 +173,8 @@ class SSLCA(Bcfg2.Server.Plugin.GroupSpool): Bcfg2.Server.Plugin.bind_info(entry, metadata) def verify_cert(self, filename, key_filename, entry): - do_verify = self.CAs[self.cert_specs[entry.get('name')]['ca']].get('verify_certs', True) + ca = self.CAs[self.cert_specs[entry.get('name')]['ca']] + do_verify = ca.get('chaincert') if do_verify: return (self.verify_cert_against_ca(filename, entry) and self.verify_cert_against_key(filename, key_filename)) -- cgit v1.2.3-1-g7c22