The keybox gets now compressed after 3 hours and ephemeral

stored certificates are deleted after about a day.

1 files changed, 15 insertions, 0 deletions

diff --git a/sm/keydb.c b/sm/keydb.c
index 858baf242..322307553 100644
--- a/sm/keydb.c
+++ b/sm/keydb.c
@@ -218,10 +218,25 @@ keydb_add_resource (const char *url, int force, int secret)
                 = create_dotlock (filename);
               if (!all_resources[used_resources].lockhandle)
                 log_fatal ( _("can't create lock for `%s'\n"), filename);
+
+              /* Do a compress run if needed and the file is not locked. */
+              if (!make_dotlock (all_resources[used_resources].lockhandle, 0))
+                {
+                  KEYBOX_HANDLE kbxhd = keybox_new (token, secret);
+                  
+                  if (kbxhd)
+                    {
+                      keybox_compress (kbxhd);
+                      keybox_release (kbxhd);
+                    }
+                  release_dotlock (all_resources[used_resources].lockhandle);
+                }
                   
               used_resources++;
             }
         }
+
+
 	break;
     default:
       log_error ("resource type of `%s' not supported\n", url);