From d2745a7b60a7fef88958bd52b3876c105da87e77 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Tue, 20 May 2025 19:54:59 +0200
Subject: pki: T6013: add proper dependencies for SSH CA

We need to establish proper dependencies on "system login" and "pki ca" for
the SSH subsystem. If the CA is updated or user principal names are modified,
we must also ensure that the SSH daemon is restarted accordingly.
---
 src/conf_mode/pki.py | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src/conf_mode/pki.py')

diff --git a/src/conf_mode/pki.py b/src/conf_mode/pki.py
index 869518dd9..14fe86d56 100755
--- a/src/conf_mode/pki.py
+++ b/src/conf_mode/pki.py
@@ -63,6 +63,10 @@ sync_search = [
         'keys': ['certificate'],
         'path': ['service', 'https'],
     },
+    {
+        'keys': ['ca_certificate'],
+        'path': ['service', 'ssh'],
+    },
     {
         'keys': ['certificate', 'ca_certificate'],
         'path': ['interfaces', 'ethernet'],
-- 
cgit v1.2.3