From 2c72a7a2310bf72e1e4d6c7f3202a34eebd45a56 Mon Sep 17 00:00:00 2001 From: root <13200018+siddharths2710@users.noreply.github.com> Date: Mon, 20 Jan 2020 15:39:48 +0100 Subject: [PATCH] Hardcoded checks for ED curves manually --- easyrsa3/easyrsa | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index d604387..1dfe833 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -665,10 +665,13 @@ current CA keypair. If you intended to start a new CA, run init-pki first." "$EASYRSA_OPENSSL" ec -out "$out_key_tmp" $crypto_opts ${EASYRSA_PASSOUT:+-passout "$EASYRSA_PASSOUT"} || \ die "Failed create CA private key" elif [ "ed" = "$EASYRSA_ALGO" ]; then - CURVE_CAPS=$(echo $EASYRSA_CURVE | tr '[a-z]' '[A-Z]') - echo "$EASYRSA_OPENSSL genpkey -algorithm $CURVE_CAPS -out $out_key_tmp" - "$EASYRSA_OPENSSL" genpkey -algorithm $CURVE_CAPS -out $out_key_tmp || \ + if [ "ed25519" = "$EASYRSA_CURVE" ]; then + "$EASYRSA_OPENSSL" genpkey -algorithm ED25519 -out $out_key_tmp || \ die "Failed create CA private key" + elif [ "ed448" = "$EASYRSA_CURVE" ]; then + "$EASYRSA_OPENSSL" genpkey -algorithm ED448 -out $out_key_tmp || \ + die "Failed create CA private key" + fi fi # create the CA keypair: