dont verify request hash in auth.check()

diff --git a/sfa/trust/auth.py b/sfa/trust/auth.py
index 611a9ba..f15da14 100644 (file)
--- a/sfa/trust/auth.py
+++ b/sfa/trust/auth.py
@@ -45,6 +45,10 @@ class Auth:
         # make sure the client_gid is not blank
         if not self.client_gid:
             raise MissingCallerGID(self.client_cred.get_subject())
+       
+        # validate the client cert if it exists
+        if peer_cert:
+            self.verifyPeerCert()                   
 
         # make sure the client is allowed to perform the operation
         if operation: