Add option to only accept updates for existing keys

[onak.git] / onak.c

diff --git a/onak.c b/onak.c
index 70f54348ccf39b5fa733b37425f523ef0ba04b72..030d46819bf6c5198655b57203cf2ebf27ee1cfa 100644 (file)
--- a/onak.c
+++ b/onak.c
@@ -242,6 +242,8 @@ int main(int argc, char *argv[])
                        logthing(LOGTHING_NOTICE, "Got %d new keys.",
                                        dbctx->update_keys(dbctx, &keys,
                                                &config.blacklist,
+                                               (config.clean_policies &
+                                                ONAK_CLEAN_UPDATE_ONLY),
                                                false));
                        if (keys != NULL && update) {
                                flatten_publickey(keys,