diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-06-16 17:36:37 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-06-18 16:07:54 +0200 |
| commit | 101924e2c40f45fc1302633f2448bccee0c9c5e8 (patch) | |
| tree | 5b453b369e893ca82b88fb4abcabf61f9d261580 /python | |
| parent | 4fb32bc179127691f40c8e93c55877aa76f10416 (diff) | |
| download | vyos-1x-101924e2c40f45fc1302633f2448bccee0c9c5e8.tar.gz vyos-1x-101924e2c40f45fc1302633f2448bccee0c9c5e8.zip | |
pki: T8994: add graceful error handling in case certbot fails
If ACME and certbot are used for PKI and e.g. haproxy it can become an issue if
certbot is blocked by the firewall. The renewal service will fail and tear-down
the production service - even if the certificate is yet not expired.
The production service was not restarted. This has been changed as every service
which is stopped prior to the renew is later restarted even upon failure of
renewing said certificate.
Diffstat (limited to 'python')
0 files changed, 0 insertions, 0 deletions