openssh_cert - fix full_idempotence for host certificates (#396)

* fixing host cert idempotence

* adding changelog fragment
This commit is contained in:
Andrew Pantuso
2022-02-04 14:53:50 -05:00
committed by GitHub
parent 12749088a0
commit a307618872
3 changed files with 28 additions and 1 deletions

View File

@@ -391,7 +391,7 @@ class Certificate(OpensshModule):
def _is_fully_valid(self):
return self._is_partially_valid() and all([
self._compare_options(),
self._compare_options() if self.original_data.type == 'user' else True,
self.original_data.key_id == self.identifier,
self.original_data.public_key == self._get_key_fingerprint(self.public_key),
self.original_data.signing_key == self._get_key_fingerprint(self.signing_key),