security: do not crash initramfs ks parsing on failing certificate

For example when --dir is pointing to read-only filesystem. Related: INSTALLER-4030
rhinstaller · Jan 17, 2025 · 058749e · 058749e
1 parent 2c34a65
commit 058749e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/dracut/parse-kickstart b/dracut/parse-kickstart
@@ -438,7 +438,11 @@ def process_certificates(handler):
             log.error("Missing certificate file name, skipping.")
             continue
 
-        _dump_certificate(cert)
+        try:
+            _dump_certificate(cert)
+        except OSError as e:
+            log.error("Dump of certificate %s failed: %s", cert.filename, e)
+            continue
         # Dump for transport to switchroot
         _dump_certificate(cert, root=CERT_TRANSPORT_DIR+"/path/")