nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build-ca: Force the unit-test to build CA with pass via 'stdin' method

Browse Source 
ERSA_UTEST_VERSION and EASYRSA_USE_PASS are only defined when the unit-tests are run.
When they are detected, force use of CA password via 'stdin'.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
This commit is contained in:
Richard T Bonhomme 2023-05-22 18:16:32 +01:00
parent c11135d19b
commit 51cb520887
No known key found for this signature in database
GPG Key ID: 2D767DB92FB6C246
1 changed files with 25 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
easyrsa3/easyrsa
View File

@ -1575,6 +1575,15 @@ to the latest Easy-RSA release."
then
: # No passphrase required
# Strictly for use only by easyrsa-unit-tests.sh
elif [ "$ERSA_UTEST_VERSION" ] && [ "$EASYRSA_USE_PASS" ]
then
# Set a test password and use file-descriptor method
CA_key_pass='EasyRSA'
# To use stdin for -passin and -passout
# MUST use -batch
ssl_batch=1
elif [ "$EASYRSA_PASSOUT" ] && [ "$EASYRSA_PASSIN" ]
then
: # passphrase defined
@ -1700,8 +1709,14 @@ to the latest Easy-RSA release."
;;
*) die "Unknown algorithm: $EASYRSA_ALGO"
esac
verbose "\
build_ca: CA key password created via FD"
build_ca: CA key password created via stdin"
if [ "$ERSA_UTEST_VERSION" ] && \
[ "$EASYRSA_USE_PASS" ]
then
print "CA key via stdin"
fi
else
case "$EASYRSA_ALGO" in
@ -1753,12 +1768,19 @@ build_ca: CA key password created via temp-files"
${CA_key_pass}
EOF
then
verbose "\
build_ca: CA certificate password created via FD"
: # ok
else
die "Failed to build the CA keypair."
fi
verbose "\
build_ca: CA certificate password created via stdin"
if [ "$ERSA_UTEST_VERSION" ] && \
[ "$EASYRSA_USE_PASS" ]
then
print "CA Cert via stdin"
fi
else
easyrsa_openssl req -utf8 -new \
-key "$out_key_tmp" -keyout "$out_key_tmp" \