[fix] Don't break the cert renew process, just warn.

This commit is contained in:
pitchum 2020-03-29 11:51:12 +02:00
parent e59a38a88a
commit f52eef4bc2

View file

@ -643,9 +643,10 @@ def _prepare_certificate_signing_request(domain, key_file, output_folder):
if domain == _get_maindomain(): if domain == _get_maindomain():
# Include xmpp-upload subdomain in subject alternate names # Include xmpp-upload subdomain in subject alternate names
subdomain="xmpp-upload." + domain subdomain="xmpp-upload." + domain
if _dns_ip_match_public_ip(get_public_ip(), subdomain): try:
_dns_ip_match_public_ip(get_public_ip(), subdomain)
csr.add_extensions([crypto.X509Extension("subjectAltName", False, "DNS:" + subdomain)]) csr.add_extensions([crypto.X509Extension("subjectAltName", False, "DNS:" + subdomain)])
else: except YunohostError:
logger.warning(m18n.n('certmanager_warning_subdomain_dns_record', subdomain=subdomain, domain=domain)) logger.warning(m18n.n('certmanager_warning_subdomain_dns_record', subdomain=subdomain, domain=domain))
# Set the key # Set the key