summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-02-02 20:37:11 +0100
committerChristian Breunig <christian@breunig.cc>2024-02-02 20:37:11 +0100
commit9b56a86def674886721a367c02371f9da65c3fd3 (patch)
tree8a11b0d9139df446d6130e7b795e6e09871f6914 /src
parent84b17f0e666b7fb48e2e9cde12ce2e84b59dd5b2 (diff)
downloadvyos-1x-9b56a86def674886721a367c02371f9da65c3fd3.tar.gz
vyos-1x-9b56a86def674886721a367c02371f9da65c3fd3.zip
configdict: T5894: preserve old behavior when dealing with PKI
Commit b152b5202 ("configdict: T5894: add get_config_dict() flag with_pki") added the generic PKI flag but if there was no PKI subsystem available in the configuration, no pki dict key ever manifested in the resulting dictionary requested by the caller. This is different to the old behavior (which each caller implementing the call itself) where there always was a pki key present - even if it was empty. This triggered a bug in the IPSec script Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 600, in <module> verify(ipsec) File "/usr/libexec/vyos/conf_mode/vpn_ipsec.py", line 372, in verify verify_pki_rsa(ipsec['pki'], rsa) ~~~~~^^^^^^^ KeyError: 'pki' As it wanted to verify keys, but there was no pki dictionary key available. This commit restores the previous behavior.
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions