From 67de89b02b5a818ee5329caf2d23baa215853023 Mon Sep 17 00:00:00 2001 From: Tony Mack Date: Thu, 18 Aug 2011 11:33:50 -0400 Subject: [PATCH] all non authority certs should be marked as CA:FALSE --- sfa/trust/hierarchy.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/sfa/trust/hierarchy.py b/sfa/trust/hierarchy.py index 73b297b5..63234363 100644 --- a/sfa/trust/hierarchy.py +++ b/sfa/trust/hierarchy.py @@ -229,7 +229,7 @@ class Hierarchy: # @param uuid the unique identifier to store in the GID # @param pkey the public key to store in the GID - def create_gid(self, xrn, uuid, pkey): + def create_gid(self, xrn, uuid, pkey, CA=False): hrn, type = urn_to_hrn(xrn) parent_hrn = get_authority(hrn) # Using hrn_to_urn() here to make sure the urn is in the right format @@ -245,6 +245,10 @@ class Hierarchy: elif type and 'authority' in type: # authority type gid.set_intermediate_ca(True) + elif CA: + gid.set_intermediate_ca(True) + else: + gid.set_intermediate_ca(False) # set issuer if not parent_hrn or hrn == self.config.SFA_INTERFACE_HRN: -- 2.47.0