Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

system: trust store notifications on problems #7994

Open
2 tasks done
fichtner opened this issue Oct 21, 2024 · 0 comments
Open
2 tasks done

system: trust store notifications on problems #7994

fichtner opened this issue Oct 21, 2024 · 0 comments
Assignees
Labels
feature Adding new functionality
Milestone

Comments

@fichtner
Copy link
Member

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.

When certctl.py fails we don't get a very visible error. As the trust store is much more central now it makes sense to improve failure visibility.

E.g.

Error:
Traceback (most recent call last):
  File "/usr/local/opnsense/scripts/system/certctl.py", line 203, in <module>
    cmds[sys.argv[1]]()
  File "/usr/local/opnsense/scripts/system/certctl.py", line 160, in cmd_rehash
    os.symlink(src_filename, dst_filename)
FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/certs/untrusted/Staat_der_Nederlanden_c' -> '/etc/ssl/blacklisted/03179a64.0'

Describe the solution you like

system_trust_configure() should tell us how it went and send a system notification to be sure.

Alternatively we could try to push errors to the crash reporter, too.

Describe alternatives you considered

N/A

Additional context

https://forum.opnsense.org/index.php?topic=43448.0

@fichtner fichtner added the feature Adding new functionality label Oct 21, 2024
@fichtner fichtner added this to the 25.1 milestone Oct 21, 2024
@fichtner fichtner self-assigned this Oct 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Adding new functionality
Development

No branches or pull requests

1 participant