Remove ssl certs when user changes pages auto_ssl

1 files changed, 7 insertions, 0 deletions

diff --git a/app/models/pages_domain.rb b/app/models/pages_domain.rb
index 82901ceec01..391ebacb2d6 100644
--- a/app/models/pages_domain.rb
+++ b/app/models/pages_domain.rb
@@ -6,6 +6,8 @@ class PagesDomain < ApplicationRecord
 
   belongs_to :project
 
+  before_validation :cleanup_ssl_cert, if: -> { auto_ssl_enabled_changed? }
+
   validates :domain, hostname: { allow_numeric_hostname: true }
   validates :domain, uniqueness: { case_sensitive: false }
   validates :certificate, presence: { message: 'must be present if HTTPS-only is enabled' }, if: ->(domain) { domain.project&.pages_https_only? }
@@ -198,4 +200,9 @@ class PagesDomain < ApplicationRecord
   rescue OpenSSL::PKey::PKeyError, OpenSSL::Cipher::CipherError
     nil
   end
+
+  def cleanup_ssl_cert
+    self.certificate = nil
+    self.key = nil
+  end
 end