summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rwxr-xr-xsrc/conf_mode/pki.py7
1 files changed, 7 insertions, 0 deletions
diff --git a/src/conf_mode/pki.py b/src/conf_mode/pki.py
index d1695cb4f..98e5840a9 100755
--- a/src/conf_mode/pki.py
+++ b/src/conf_mode/pki.py
@@ -265,11 +265,18 @@ def get_config(config=None):
continue
if not dict_search('system.load_balancing.haproxy', pki):
continue
+ # Determine which service depends on ACME issued certificates
used_by = []
+ # We start with HAProxy
for cert_list, _ in dict_search_recursive(
pki['system']['load_balancing']['haproxy'], 'certificate'):
if name in cert_list:
used_by.append('haproxy')
+ # Check if OpenConnect consumes an ACME certificate
+ tmp = dict_search('system.vpn.openconnect.ssl.certificate', pki)
+ if tmp and tmp in cert_list:
+ used_by.append('openconnect')
+
if used_by:
pki['certificate'][name]['acme'].update({'used_by': used_by})