Page MenuHomeVyOS Platform

pki: openconnect certificate usage check uses leaked loop variable, NameError when haproxy has no certificate
Closed, ResolvedPublicBUG

Description

The pki OpenConnect certificate-usage check compares against a variable leaked from the preceding HAProxy loop.

Location
src/conf_mode/pki.py:529-544

Problem
tmp in cert_list compares against the last HAProxy iteration's variable; if the loop never ran, NameError.

Details

Version
rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)