From fc246d294e2ebc81f8884dbb7a872cdfa4bc8094 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Thu, 2 Oct 2025 23:30:51 +0200 Subject: config: T7885: show user Warning() instead of hard error on ACME cert issue This complements commit ae74a511e (pki: T7885: support full ACME setup via renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate data can't be merged into the VyOS configuration, preventing interface (e.g., ethernet) setup during boot. This change ensures basic IP connectivity is established, allowing remote management instead of leaving the system entirely inaccessible. This is not what we will expect but if a user deletes /config/auth/letsencrypt - this is what will happen. --- python/vyos/config.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'python') diff --git a/python/vyos/config.py b/python/vyos/config.py index 6f7c76ca7..e14ada2ae 100644 --- a/python/vyos/config.py +++ b/python/vyos/config.py @@ -67,6 +67,7 @@ import json from typing import Union import vyos.configtree +from vyos.base import Warning from vyos.xml_ref import multi_to_list from vyos.xml_ref import from_source from vyos.xml_ref import ext_dict_merge @@ -121,7 +122,7 @@ def config_dict_mangle_acme(name, cli_dict): # install ACME based PEM keys into "regular" CLI config keys cli_dict.update({'certificate' : cert_base64, 'private' : {'key' : key_base64}}) except: - raise ConfigError(f'Unable to load ACME certificates for "{name}"!') + Warning(f'Unable to load ACME certificates for "{name}"!') return cli_dict -- cgit v1.2.3