summaryrefslogtreecommitdiff
path: root/src/migration-scripts/https
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2026-08-10 18:45:57 +0000
committerChristian Breunig <christian@breunig.cc>2026-08-10 21:06:00 +0200
commitae05ffb8bfae759dee1c891d8fef2094be1d6132 (patch)
tree1550a93c42b5feaa85fbb4f02ce2033f87c40c8d /src/migration-scripts/https
parent5faebdb613ae83947f0428951f6e68d6b66da7db (diff)
downloadvyos-1x-ae05ffb8bfae759dee1c891d8fef2094be1d6132.tar.gz
vyos-1x-ae05ffb8bfae759dee1c891d8fef2094be1d6132.zip
pki: T9135: restore an ACME certificate backup on any request failure
certbot_request() ultimately shells out via cmdl(), which can fail with something other than ConfigError - e.g. FileNotFoundError if the certbot binary itself is missing, or another OSError from the underlying process call. The backup/restore wrapper around a certificate replacement only caught ConfigError, so any other failure skipped restoration entirely and left the certificate deleted with no way back, defeating the point of taking a backup before requesting a replacement in the first place.
Diffstat (limited to 'src/migration-scripts/https')
0 files changed, 0 insertions, 0 deletions