diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-08-10 18:45:57 +0000 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-08-10 21:06:00 +0200 |
| commit | ae05ffb8bfae759dee1c891d8fef2094be1d6132 (patch) | |
| tree | 1550a93c42b5feaa85fbb4f02ce2033f87c40c8d /src/migration-scripts | |
| parent | 5faebdb613ae83947f0428951f6e68d6b66da7db (diff) | |
| download | vyos-1x-ae05ffb8bfae759dee1c891d8fef2094be1d6132.tar.gz vyos-1x-ae05ffb8bfae759dee1c891d8fef2094be1d6132.zip | |
pki: T9135: restore an ACME certificate backup on any request failure
certbot_request() ultimately shells out via cmdl(), which can fail with
something other than ConfigError - e.g. FileNotFoundError if the certbot
binary itself is missing, or another OSError from the underlying process
call. The backup/restore wrapper around a certificate replacement only
caught ConfigError, so any other failure skipped restoration entirely and
left the certificate deleted with no way back, defeating the point of taking
a backup before requesting a replacement in the first place.
Diffstat (limited to 'src/migration-scripts')
0 files changed, 0 insertions, 0 deletions
