Merge pull request #1022 from sozu-proxy/devel/fdubois/fix/replace-ce…

…rtificate fix(tls): do not replace fresh certificate
sozu-proxy · Oct 27, 2023 · 1a3a777 · 1a3a777
2 parents 039a5e3 + 60bb97e
commit 1a3a777
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/src/tls.rs b/lib/src/tls.rs
@@ -70,7 +70,12 @@ pub trait CertificateResolver {
             expired_at: opts.new_expired_at.to_owned(),
         })?;
 
-        self.remove_certificate(&fingerprint)?;
+        match hex::decode(&opts.old_fingerprint) {
+            Ok(old_fingerprint) =>  self.remove_certificate(&Fingerprint(old_fingerprint))?,
+            Err(err) => {
+                error!("failed to parse fingerprint, {}", err);
+            }
+        }
 
         Ok(fingerprint)
     }