T6013: Remove trusted_user_ca_key when the configuration does not exist

takehaya · sarthurdev · takehaya · commit 8b560e7ef40b · 2024-12-23T09:13:14.000Z
Co-authored-by: Simon &lt;965089+sarthurdev@users.noreply.github.com&gt;
diff --git a/src/conf_mode/service_ssh.py b/src/conf_mode/service_ssh.py
@@ -134,6 +134,8 @@ def generate(ssh):
         write_file(
             trusted_user_ca_key, '\n'.join(encode_certificate(c) for c in ca_full_chain)
         )
+    elif os.path.exists(trusted_user_ca_key):
+        os.unlink(trusted_user_ca_key)
 
     render(config_file, 'ssh/sshd_config.j2', ssh)
 

Original file line number	Diff line number	Diff line change
`@@ -134,6 +134,8 @@ def generate(ssh):`
`134`	`134`	`write_file(`
`135`	`135`	`trusted_user_ca_key, '\n'.join(encode_certificate(c) for c in ca_full_chain)`
`136`	`136`	`)`
	`137`	`+ elif os.path.exists(trusted_user_ca_key):`
	`138`	`+ os.unlink(trusted_user_ca_key)`
`137`	`139`
`138`	`140`	`render(config_file, 'ssh/sshd_config.j2', ssh)`
`139`	`141`