[Admin Shell][NSX-V] Set vCenter ca cert only if pem file exists

Avoid trying to validate server certificate again a non-existing
pem file. That would be unlikely to work.

Change-Id: Idde4ff67bf52a8c331ab89e0c61f9982c8aab7de
This commit is contained in:
Salvatore Orlando 2021-04-14 12:54:48 -07:00 committed by Salvatore Orlando
parent 276f895caa
commit e624ca9687
1 changed files with 5 additions and 3 deletions

View File

@ -12,6 +12,7 @@
# License for the specific language governing permissions and limitations
# under the License.
import os
import sys
import netaddr
@ -539,9 +540,10 @@ def validate_config_for_migration(resource, event, trigger, **kwargs):
# to vcenter will fail
if not cfg.CONF.dvs.ca_file:
ca_file_default = "/etc/ssl/certs/vcenter.pem"
LOG.info("ca_file for vCenter unset, defaulting to: %s",
ca_file_default)
cfg.CONF.set_override('ca_file', ca_file_default, 'dvs')
if os.path.isfile(ca_file_default):
LOG.info("ca_file for vCenter unset, defaulting to: %s",
ca_file_default)
cfg.CONF.set_override('ca_file', ca_file_default, 'dvs')
LOG.info("Running migration config validation in %sstrict mode",
'' if strict else 'non-')