mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-23 01:53:28 +00:00
Fix errant certificate handling
Non-replacement detection was being treated as replacement. Correct that mistake.
This commit is contained in:
parent
312af72d9f
commit
5c93976bdb
@ -719,7 +719,7 @@ def discover_node(cfg, handler, info, nodename, manual):
|
||||
if 'pxe' in policies and info['handler'] == pxeh:
|
||||
return do_pxe_discovery(cfg, handler, info, manual, nodename, policies)
|
||||
elif ('permissive' in policies and handler.https_supported and lastfp and
|
||||
not manual):
|
||||
not util.cert_matches(lastfp, handler.https_cert) and not manual):
|
||||
info['discofailure'] = 'fingerprint'
|
||||
log.log({'info': 'Detected replacement of {0} with existing '
|
||||
'fingerprint and permissive discovery policy, not '
|
||||
|
Loading…
Reference in New Issue
Block a user