diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-10-02 23:30:51 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-10-02 23:41:24 +0200 |
| commit | fc246d294e2ebc81f8884dbb7a872cdfa4bc8094 (patch) | |
| tree | 0dacc187a17c4695ee887232e024dd397267a33c /python | |
| parent | ae74a511e11b7516a276b9bfa40e2c02cbe182cd (diff) | |
| download | vyos-1x-fc246d294e2ebc81f8884dbb7a872cdfa4bc8094.tar.gz vyos-1x-fc246d294e2ebc81f8884dbb7a872cdfa4bc8094.zip | |
config: T7885: show user Warning() instead of hard error on ACME cert issue
This complements commit ae74a511e (pki: T7885: support full ACME setup via
renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate
data can't be merged into the VyOS configuration, preventing interface (e.g.,
ethernet) setup during boot.
This change ensures basic IP connectivity is established, allowing remote
management instead of leaving the system entirely inaccessible.
This is not what we will expect but if a user deletes /config/auth/letsencrypt -
this is what will happen.
Diffstat (limited to 'python')
| -rw-r--r-- | python/vyos/config.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/python/vyos/config.py b/python/vyos/config.py index 6f7c76ca7..e14ada2ae 100644 --- a/python/vyos/config.py +++ b/python/vyos/config.py @@ -67,6 +67,7 @@ import json from typing import Union import vyos.configtree +from vyos.base import Warning from vyos.xml_ref import multi_to_list from vyos.xml_ref import from_source from vyos.xml_ref import ext_dict_merge @@ -121,7 +122,7 @@ def config_dict_mangle_acme(name, cli_dict): # install ACME based PEM keys into "regular" CLI config keys cli_dict.update({'certificate' : cert_base64, 'private' : {'key' : key_base64}}) except: - raise ConfigError(f'Unable to load ACME certificates for "{name}"!') + Warning(f'Unable to load ACME certificates for "{name}"!') return cli_dict |