Page MenuHomeVyOS Platform

eapol: commit fails with KeyError when PKI certificate name differs from the CA name
Closed, ResolvedPublicBUG

Description

When an eapol configuration is set up with a CA cert and client cert with different names, the config validation step for commit crashes with a KeyError.

It seems this is due to a simple typo: https://github.com/vyos/vyos-1x/blob/122c7a53575f67759f157e02eca776f799658dc1/python/vyos/configverify.py#L171-L176

The code is indexing config['pki']['ca'] with cert_name instead of ca_cert_name.

Details

Difficulty level
Easy (less than an hour)
Version
1.4-rolling-202202080317
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)