From c15ebc0a82b94ce78a58181d0d9ccac1b07ce69e Mon Sep 17 00:00:00 2001
From: Radek Vykydal <rvykydal@redhat.com>
Date: Tue, 28 Jan 2025 16:16:58 +0100
Subject: [PATCH] security: handle exception on early anaconda certificate
 import

Present human readable error message.

The case for this fix is missing --dir option.  The option will be
probably made required in pykickstart but we still want to handle
import exceptions in user friendly way.

Related: INSTALLER-4030
Resolves: rhbz#2342245
---
 pyanaconda/startup_utils.py | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/pyanaconda/startup_utils.py b/pyanaconda/startup_utils.py
index a6f53b225d37..dc54b066015d 100644
--- a/pyanaconda/startup_utils.py
+++ b/pyanaconda/startup_utils.py
@@ -76,6 +76,7 @@
     STORAGE,
     TIMEZONE,
 )
+from pyanaconda.modules.common.errors.installation import SecurityInstallationError
 from pyanaconda.modules.common.structures.logging import LoggingData
 from pyanaconda.modules.common.structures.timezone import (
     GeolocationData,
@@ -656,7 +657,16 @@ def initialize_security():
     certificates_proxy = SECURITY.get_proxy(CERTIFICATES)
     import_task_path = certificates_proxy.ImportWithTask()
     task_proxy = SECURITY.get_proxy(import_task_path)
-    sync_run_task(task_proxy)
+    try:
+        sync_run_task(task_proxy)
+    except SecurityInstallationError as e:
+        log.error(e)
+        print(_("\nAn error occurred during certificate import:"
+                "\n%s\n") % str(e).strip())
+
+        print(_("The installation cannot continue"))
+        ipmi_report(IPMI_ABORTED)
+        sys.exit(1)
 
 
 def print_dracut_errors(stdout_logger):