diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-10-02 23:35:58 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-10-02 23:46:51 +0200 |
| commit | 28bdc8b4e7fcb667f6157fa81efeb78f017c5f92 (patch) | |
| tree | 868cc4a3ed41c0f2e523c46615cd9418d0471e54 | |
| parent | fc246d294e2ebc81f8884dbb7a872cdfa4bc8094 (diff) | |
| download | vyos-1x-28bdc8b4e7fcb667f6157fa81efeb78f017c5f92.tar.gz vyos-1x-28bdc8b4e7fcb667f6157fa81efeb78f017c5f92.zip | |
pki: T7885: add openconnect to the list of used_by services
| -rwxr-xr-x | src/conf_mode/pki.py | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/conf_mode/pki.py b/src/conf_mode/pki.py index d1695cb4f..98e5840a9 100755 --- a/src/conf_mode/pki.py +++ b/src/conf_mode/pki.py @@ -265,11 +265,18 @@ def get_config(config=None): continue if not dict_search('system.load_balancing.haproxy', pki): continue + # Determine which service depends on ACME issued certificates used_by = [] + # We start with HAProxy for cert_list, _ in dict_search_recursive( pki['system']['load_balancing']['haproxy'], 'certificate'): if name in cert_list: used_by.append('haproxy') + # Check if OpenConnect consumes an ACME certificate + tmp = dict_search('system.vpn.openconnect.ssl.certificate', pki) + if tmp and tmp in cert_list: + used_by.append('openconnect') + if used_by: pki['certificate'][name]['acme'].update({'used_by': used_by}) |