From: Aleš Mrázek <ales.mrazek@nic.cz>
Date: Wed, 21 Jan 2026 20:19:16 +0000 (+0100)
Subject: python: manager/files: do not reload TLS certificate files if they do not exist
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3665e363f63eb2ecf5279e5ac4a2088db2b02914;p=thirdparty%2Fknot-resolver.git

python: manager/files: do not reload TLS certificate files if they do not exist

This fixes a randomly occuring pkg test error mentioned in !1794.
---

diff --git a/python/knot_resolver/manager/files/reload.py b/python/knot_resolver/manager/files/reload.py
index ca66adfeb..5c16c37a7 100644
--- a/python/knot_resolver/manager/files/reload.py
+++ b/python/knot_resolver/manager/files/reload.py
@@ -11,7 +11,11 @@ async def files_reload(config: KresConfig, force: bool = False) -> None:
     key_file = config.network.tls.key_file
 
     if cert_file and key_file:
-        logger.info("TLS cert files reload triggered")
-
-        cmd = f"net.tls('{cert_file}', '{key_file}')"
-        await command_registered_workers(cmd)
+        if not cert_file.to_path().exists():
+            logger.error(f"TLS cert files reload failed: cert-file {cert_file} file don't exist")
+        elif not key_file.to_path().exists():
+            logger.error(f"TLS cert files failed: cert-file {key_file} file don't exist")
+        else:
+            logger.info("TLS cert files reload triggered")
+            cmd = f"net.tls('{cert_file}', '{key_file}')"
+            await command_registered_workers(cmd)