T6013: Remove trusted_user_ca_key when the configuration does not exist

Co-authored-by: Simon <[email protected]>
vyos · Dec 21, 2024 · b8ef2d1 · b8ef2d1
1 parent 040b197
commit b8ef2d1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/conf_mode/service_ssh.py b/src/conf_mode/service_ssh.py
@@ -120,6 +120,9 @@ def generate(ssh):
         call(f'ssh-keygen -q -N "" -t ed25519 -f {key_ed25519}')
 
     if 'trusted_user_ca_key' in ssh:
+        ...
+    elif os.path.exists(trusted_user_ca_key):
+        os.unlink(trusted_user_ca_key)
         ca_key_name = ssh['trusted_user_ca_key']['ca_certificate']
         pki_ca_cert = ssh['pki']['ca'][ca_key_name]