XXX

kedifa/updater.py

@@ -7,6 +7,7 @@ import requests
 import sys
 import time
 import zc.lockfile
+import subprocess
 
 
 class Updater(object):
@@ -67,7 +68,8 @@ class Updater(object):
           print('Certificate %r: %r is empty' % (certificate_file, url,))
     return certificate
 
-  def updateCertificate(self, certificate_file, master_content=None):
+  def updateCertificate(self, certificate_file, master_content=None,
+                        validator=None):
     url, fallback_file = self.mapping[certificate_file]
     certificate = self.fetchCertificate(url, certificate_file)
 
@@ -104,6 +106,9 @@ class Updater(object):
     else:
       self.state_dict[certificate_file] = {'overridden': True}
 
+    if validator is not None and master_content:
+      # In case if it is not master certificate do the validation
+      subprocess.run(validator)
     if current != certificate:
       with open(certificate_file, 'w') as fh:
         fh.write(certificate)