Disallow issuing certificates from inactive authority (#936)

2017-09-26 01:34:49 +03:00
parent 645641f4bd
commit 54ff4cddbf
4 changed files with 27 additions and 8 deletions
--- a/lemur/certificates/schemas.py
+++ b/lemur/certificates/schemas.py
@ -84,6 +84,11 @@ class CertificateInputSchema(CertificateCreationSchema):

    extensions = fields.Nested(ExtensionSchema)

+    @validates_schema
+    def validate_authority(self, data):
+        if not data['authority'].active:
+            raise ValidationError("The authority is inactive.", ['authority'])
+
    @validates_schema
    def validate_dates(self, data):
        validators.dates(data)