fix cert blacklist reload

SenseUnit · Jan 4, 2025 · eb822b1 · eb822b1
1 parent 3514865
commit eb822b1
Showing 1 changed file with 7 additions and 8 deletions.
diff --git a/auth/cert.go b/auth/cert.go
@@ -43,12 +43,6 @@ func NewCertAuth(param_url *url.URL, logger *clog.CondLogger) (*CertAuth, error)
 	}
 	auth.blacklist.Store(new(serialNumberSetFile))
 
-	if auth.blacklistFilename != "" {
-		if err := auth.reload(); err != nil {
-			return nil, fmt.Errorf("unable to load initial certificate blacklist: %w", err)
-		}
-	}
-
 	reloadInterval := 15 * time.Second
 	if reloadIntervalOption := values.Get("reload"); reloadIntervalOption != "" {
 		parsedInterval, err := time.ParseDuration(reloadIntervalOption)
@@ -57,8 +51,13 @@ func NewCertAuth(param_url *url.URL, logger *clog.CondLogger) (*CertAuth, error)
 		}
 		reloadInterval = parsedInterval
 	}
-	if reloadInterval > 0 {
-		go auth.reloadLoop(reloadInterval)
+	if auth.blacklistFilename != "" {
+		if err := auth.reload(); err != nil {
+			return nil, fmt.Errorf("unable to load initial certificate blacklist: %w", err)
+		}
+		if reloadInterval > 0 {
+			go auth.reloadLoop(reloadInterval)
+		}
 	}
 
 	return auth, nil