Page MenuHomeVyOS Platform

pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use
Closed, ResolvedPublicBUG

Description

To reproduce:

set pki certificate repka acme domain foo.bar.com
set pki certificate repka acme email 'someone@gmail.com'
set pki certificate repka acme url https://acme-staging-v02.api.letsencrypt.org/directory
vyos@-VFW046# commit
[ pki ]
Updating configuration: "vpn ipsec remote-access connection rw
authentication x509 certificate repka"

Traceback (most recent call last):
  File "/usr/libexec/vyos/services/vyos-configd", line 145, in run_script
    script.verify(c)
  File "/usr/libexec/vyos//conf_mode/pki.py", line 381, in verify
    certbot_request(name, cert_conf['acme'])
  File "/usr/libexec/vyos//conf_mode/pki.py", line 147, in certbot_request
    if ('haproxy' in dict_search('used_by', config) and
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: argument of type 'NoneType' is not iterable

[[pki]] failed
Commit failed

Details

Version
20250617
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)
Forum thread
https://forum.vyos.io/t/1-5-rolling-replaces-symbolic-links-with-files-in-certbot-directory-another-bug-or-feature-request/16692

Event Timeline

c-po changed the task status from Open to In progress.
c-po claimed this task.
c-po triaged this task as High priority.
c-po renamed this task from pki: TypeError: argument of type 'NoneType' is not iterable when haprox is not in use to pki: TypeError: argument of type 'NoneType' is not iterable when HAProxy is not in use.Jun 23 2025, 8:53 PM
c-po moved this task from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
c-po moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.Jul 9 2025, 1:13 PM