From 5e527b2b01e8e994caa2458f4fead445294a27c9 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Mon, 12 Feb 2024 21:16:12 +0100 Subject: pki: T6034: add dependencies to trigger rpki re-run on openssh key update (cherry picked from commit 0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350) --- src/conf_mode/pki.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/conf_mode/pki.py b/src/conf_mode/pki.py index 2d076e42d..3ab6ac5c3 100755 --- a/src/conf_mode/pki.py +++ b/src/conf_mode/pki.py @@ -24,7 +24,6 @@ from vyos.config import config_dict_merge from vyos.configdep import set_dependents from vyos.configdep import call_dependents from vyos.configdict import node_changed -from vyos.configdiff import Diff from vyos.defaults import directories from vyos.pki import is_ca_certificate from vyos.pki import load_certificate @@ -65,6 +64,10 @@ sync_search = [ 'keys': ['ca_certificate'], 'path': ['interfaces', 'sstpc'], }, + { + 'keys': ['key'], + 'path': ['protocols', 'rpki', 'cache'], + }, { 'keys': ['certificate', 'ca_certificate', 'local_key', 'remote_key'], 'path': ['vpn', 'ipsec'], @@ -88,7 +91,8 @@ sync_translate = { 'remote_key': 'key_pair', 'shared_secret_key': 'openvpn', 'auth_key': 'openvpn', - 'crypt_key': 'openvpn' + 'crypt_key': 'openvpn', + 'key': 'openssh', } def certbot_delete(certificate): -- cgit v1.2.3