X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Ftrust%2Fauth.py;h=65ce3fc654be70224de13a80925ce46b5f2bcd95;hb=33243a5b2ea907c7f9620024b7dade1350777572;hp=1ffcbe94f6184578762f046d07d64d3d7210bdbc;hpb=a9fe96f0ac24fc9ec75da0924aa31712b7a08e8e;p=sfa.git

diff --git a/sfa/trust/auth.py b/sfa/trust/auth.py
index 1ffcbe94..65ce3fc6 100644
--- a/sfa/trust/auth.py
+++ b/sfa/trust/auth.py
@@ -69,6 +69,11 @@ class Auth:
         if not hrns: hrns = [None]
         error=[None,None]
 
+        # if speaks for gid matches caller cert then we've found a valid
+        # speaks for credential      
+        speaks_for_gid = determine_speaks_for(logger, creds, self.peer_cert, \
+                                              options, self.trusted_cert_list)
+
         if self.peer_cert and \
            not self.peer_cert.is_pubkey(speaks_for_gid.get_pubkey()):
             valid = creds