]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
python: manager/files: do not reload TLS certificate files if they do not exist
authorAleš Mrázek <ales.mrazek@nic.cz>
Wed, 21 Jan 2026 20:19:16 +0000 (21:19 +0100)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Mon, 26 Jan 2026 09:27:03 +0000 (10:27 +0100)
This fixes a randomly occuring pkg test error mentioned in !1794.

python/knot_resolver/manager/files/reload.py

index ca66adfeb5a7d853dadfe919e4843e60df032244..5c16c37a7e25f951d31d60994bebd4bab583f6ab 100644 (file)
@@ -11,7 +11,11 @@ async def files_reload(config: KresConfig, force: bool = False) -> None:
     key_file = config.network.tls.key_file
 
     if cert_file and key_file:
-        logger.info("TLS cert files reload triggered")
-
-        cmd = f"net.tls('{cert_file}', '{key_file}')"
-        await command_registered_workers(cmd)
+        if not cert_file.to_path().exists():
+            logger.error(f"TLS cert files reload failed: cert-file {cert_file} file don't exist")
+        elif not key_file.to_path().exists():
+            logger.error(f"TLS cert files failed: cert-file {key_file} file don't exist")
+        else:
+            logger.info("TLS cert files reload triggered")
+            cmd = f"net.tls('{cert_file}', '{key_file}')"
+            await command_registered_workers(cmd)