openssh_cert - fix full_idempotence for host certificates (#396) (#397)

* fixing host cert idempotence

* adding changelog fragment

(cherry picked from commit a307618872)
This commit is contained in:
Andrew Pantuso
2022-02-05 04:00:07 -05:00
committed by GitHub
parent 2727b74cc7
commit 7ff067937a
3 changed files with 28 additions and 1 deletions

View File

@@ -379,7 +379,7 @@ class Certificate(OpensshModule):
def _is_fully_valid(self):
return self._is_partially_valid() and all([
self._compare_options(),
self._compare_options() if self.original_data.type == 'user' else True,
self.original_data.key_id == self.identifier,
self.original_data.public_key == self._get_key_fingerprint(self.public_key),
self.original_data.signing_key == self._get_key_fingerprint(self.signing_key),