Ignore key roll activation when there is no new key to activate. (interop #3)

src/daemon/ca/keys.rs

@@ -481,4 +481,12 @@ impl KeyState {
             _ => Err(Error::ResourceClassNoNewKey),
         }
     }
+
+    /// Returns true if there is a new key
+    pub fn has_new_key(&self) -> bool {
+        match self {
+            KeyState::RollNew(_, _) => true,
+            _ => false,
+        }
+    }
 }

src/daemon/ca/rc.rs

@@ -693,7 +693,7 @@ impl ResourceClass {
         staging: Duration,
         signer: &S,
     ) -> ca::Result<Vec<EvtDet>> {
-        if self.last_key_change + staging > Time::now() {
+        if !self.key_state.has_new_key() || self.last_key_change + staging > Time::now() {
             return Ok(vec![]);
         }