diff options
| author | Christian Breunig <christian@breunig.cc> | 2024-02-02 20:37:11 +0100 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2024-02-03 05:03:07 +0000 |
| commit | c224be5a55f60d972eb22dab786da0da6f874bb0 (patch) | |
| tree | 8ad3daeca1f5b692ddd3448812f65160b25f4daa /data/templates/ipsec/swanctl/peer.j2 | |
| parent | 2d8a7bda382fbd95b4bee7c6e966dfc072b52bfd (diff) | |
| download | vyos-1x-c224be5a55f60d972eb22dab786da0da6f874bb0.tar.gz vyos-1x-c224be5a55f60d972eb22dab786da0da6f874bb0.zip | |
configdict: T5894: preserve old behavior when dealing with PKI
Commit b152b5202 ("configdict: T5894: add get_config_dict() flag with_pki")
added the generic PKI flag but if there was no PKI subsystem available
in the configuration, no pki dict key ever manifested in the resulting
dictionary requested by the caller.
This is different to the old behavior (which each caller implementing the call
itself) where there always was a pki key present - even if it was empty.
This triggered a bug in the IPSec script
Traceback (most recent call last):
File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 600, in <module>
verify(ipsec)
File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 372, in verify
verify_pki_rsa(ipsec['pki'], rsa)
~~~~~^^^^^^^
KeyError: 'pki'
As it wanted to verify keys, but there was no pki dictionary key available.
This commit restores the previous behavior.
(cherry picked from commit 9b56a86def674886721a367c02371f9da65c3fd3)
Diffstat (limited to 'data/templates/ipsec/swanctl/peer.j2')
0 files changed, 0 insertions, 0 deletions