x/vmware-nsx
Code Issues Proposed changes

[Admin Shell][NSX-V] Set vCenter ca cert only if pem file exists

Browse Source 
Avoid trying to validate server certificate again a non-existing
pem file. That would be unlikely to work.

Change-Id: Idde4ff67bf52a8c331ab89e0c61f9982c8aab7de
This commit is contained in:
Salvatore Orlando 2021-04-14 12:54:48 -07:00
parent 85f4e2b993
commit 7374b88548
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
vmware_nsx/shell/admin/plugins/nsxv/resources/migration.py
View File

@ -12,6 +12,7 @@
# License for the specific language governing permissions and limitations
# under the License.
import os
import sys
import netaddr
@ -539,9 +540,10 @@ def validate_config_for_migration(resource, event, trigger, **kwargs):
# to vcenter will fail
if not cfg.CONF.dvs.ca_file:
ca_file_default = "/etc/ssl/certs/vcenter.pem"
LOG.info("ca_file for vCenter unset, defaulting to: %s",
ca_file_default)
cfg.CONF.set_override('ca_file', ca_file_default, 'dvs')
if os.path.isfile(ca_file_default):
LOG.info("ca_file for vCenter unset, defaulting to: %s",
ca_file_default)
cfg.CONF.set_override('ca_file', ca_file_default, 'dvs')
LOG.info("Running migration config validation in %sstrict mode",
'' if strict else 'non-')