exclude revoked certs from default to auto-rotate

2021-03-04 19:11:20 -08:00 · 2021-03-04 19:11:20 -08:00 · e530664da6
commit e530664da6
parent cf7de0aa59
1 changed files with 1 additions and 0 deletions
--- a/lemur/certificates/service.py
+++ b/lemur/certificates/service.py
@ -153,6 +153,7 @@ def get_all_certs_attached_to_endpoint_without_autorotate():
    return (
        Certificate.query.filter(Certificate.endpoints.any())
        .filter(Certificate.rotation == false())
+        .filter(Certificate.revoked == false())
        .filter(Certificate.not_after >= arrow.now())
        .filter(not_(Certificate.replaced.any()))
        .all()  # noqa