From: Tony Mack <tmack@paris.CS.Princeton.EDU>
Date: Fri, 23 May 2014 13:47:30 +0000 (-0400)
Subject: declare speaks_for_gid
X-Git-Tag: sfa-3.1-5~20
X-Git-Url: http://git.onelab.eu/?p=sfa.git;a=commitdiff_plain;h=33243a5b2ea907c7f9620024b7dade1350777572

declare speaks_for_gid
---

diff --git a/sfa/trust/auth.py b/sfa/trust/auth.py
index 1ffcbe94..65ce3fc6 100644
--- a/sfa/trust/auth.py
+++ b/sfa/trust/auth.py
@@ -69,6 +69,11 @@ class Auth:
         if not hrns: hrns = [None]
         error=[None,None]
 
+        # if speaks for gid matches caller cert then we've found a valid
+        # speaks for credential      
+        speaks_for_gid = determine_speaks_for(logger, creds, self.peer_cert, \
+                                              options, self.trusted_cert_list)
+
         if self.peer_cert and \
            not self.peer_cert.is_pubkey(speaks_for_gid.get_pubkey()):
             valid = creds