T6013: Remove trusted_user_ca_key when the configuration does not exist.

Co-authored-by: Simon <[email protected]>
vyos · Dec 21, 2024 · de1cda8 · de1cda8
1 parent d3d514b
commit de1cda8
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/conf_mode/service_ssh.py b/src/conf_mode/service_ssh.py
@@ -134,6 +134,8 @@ def generate(ssh):
         write_file(
             trusted_user_ca_key, '\n'.join(encode_certificate(c) for c in ca_full_chain)
         )
+    elif os.path.exists(trusted_user_ca_key):
+        os.unlink(trusted_user_ca_key)
 
     render(config_file, 'ssh/sshd_config.j2', ssh)