2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-23 01:53:28 +00:00

Fix errant certificate handling

Non-replacement detection was being treated as replacement.  Correct
that mistake.
This commit is contained in:
Jarrod Johnson 2017-08-24 16:57:06 -04:00
parent 312af72d9f
commit 5c93976bdb

View File

@ -719,7 +719,7 @@ def discover_node(cfg, handler, info, nodename, manual):
if 'pxe' in policies and info['handler'] == pxeh:
return do_pxe_discovery(cfg, handler, info, manual, nodename, policies)
elif ('permissive' in policies and handler.https_supported and lastfp and
not manual):
not util.cert_matches(lastfp, handler.https_cert) and not manual):
info['discofailure'] = 'fingerprint'
log.log({'info': 'Detected replacement of {0} with existing '
'fingerprint and permissive discovery policy, not '