From 0a4f60ae265a2f8c8d547ac43d3fd8348a5a52ce Mon Sep 17 00:00:00 2001
From: Keagan McClelland <keagan.mcclelland@gmail.com>
Date: Tue, 12 Oct 2021 17:36:12 -0600
Subject: [PATCH] actually update ssl certificate in persistence when we are
 within the expiration window.

---
 appmgr/src/net/ssl.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/appmgr/src/net/ssl.rs b/appmgr/src/net/ssl.rs
index 11dbb918b..af75bcd14 100644
--- a/appmgr/src/net/ssl.rs
+++ b/appmgr/src/net/ssl.rs
@@ -188,6 +188,7 @@ impl SslManager {
                 if expiration.compare(&window_end)? == Ordering::Less {
                     let key = generate_key()?;
                     let cert = make_leaf_cert((&self.int_key, &self.int_cert), (&key, dns_base))?;
+                    self.store.update_certificate(&key, &cert, dns_base).await?;
                     Ok((key, cert))
                 } else {
                     Ok((key, cert))