insights-core icon indicating copy to clipboard operation
insights-core copied to clipboard

getcert_list parser does not handle KeyError

Open code-with-amitk opened this issue 4 years ago • 0 comments

An certificate can have a key:value pair which is not present with other certificates.

Example: ID(123) has 'ca-error' pair while ID(456) does not have.

""" Request ID '123': status: MONITORING ca-error: Server at "https://ipaserver1:8443/ca/agent/ca/profileProcess" replied: 1: Invalid Credential. stuck: no key pair storage: type=NSSDB,location='/etc/dirsrv/slapd-EXAMPLE-COM',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/dirsrv/slapd-EXAMPLE-COM/pwdfile.txt' certificate: type=NSSDB,location='/etc/dirsrv/slapd-EXAMPLE-COM',nickname='Server-Cert',token='NSS Certificate DB' CA: IPA issuer: CN=Certificate Authority,O=EXAMPLE.COM subject: CN=ldap.example.com,O=EXAMPLE.COM expires: 2017-05-22 13:33:27 UTC key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment eku: id-kp-serverAuth,id-kp-clientAuth pre-save command: post-save command: /usr/lib64/ipa/certmonger/restart_dirsrv EXAMPLE-COM track: yes auto-renew: yes

Request ID '456': status: MONITORING stuck: no key pair storage: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt' certificate: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB' CA: IPA issuer: CN=Certificate Authority,O=EXAMPLE.COM subject: CN=ldap.example.com,O=EXAMPLE.COM expires: 2017-05-22 13:35:49 UTC key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment eku: id-kp-serverAuth,id-kp-clientAuth pre-save command: post-save command: /usr/lib64/ipa/certmonger/restart_httpd track: yes auto-renew: yes """

print (certs['123']['ca-error'])		<<Ok
print (certs.get(['456']['ca-error']))		<<KeyError

code-with-amitk avatar Apr 12 '20 11:04 code-with-amitk