Do not allow changing anything for tnc cert

truenas · Dec 18, 2024 · a0bd1a7 · a0bd1a7
1 parent 5e7c62b
commit a0bd1a7
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/middlewared/middlewared/plugins/crypto_/certificates.py b/src/middlewared/middlewared/plugins/crypto_/certificates.py
@@ -601,6 +601,13 @@ async def do_update(self, job, id_, data):
         if any(new.get(k) != old.get(k) for k in ('name', 'revoked', 'renew_days', 'add_to_trusted_store')):
 
             verrors = ValidationErrors()
+            tnc_config = await self.middleware.call('tn_connect.config')
+            if tnc_config['certificate'] == id_:
+                verrors.add(
+                    'certificate_update.name',
+                    'This certificate is being used by TrueNAS Connect service and cannot be modified'
+                )
+                verrors.check()
 
             if new['name'] != old['name']:
                 await validate_cert_name(