verify_algo_params(): Call SSL lib via EASYRSA_OPENSSL

verify_algo_params() expects errors when settings are not corrrect.
Therefore, is must not use easyrsa_openssl() meta-wrapper, which would
error out with a misleading error message.

Fixing this also ensures that the SAFE SSL config is not built prior
to EASYRSA_REQ_CN being set.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
This commit is contained in:
Richard T Bonhomme 2023-05-06 15:44:38 +01:00
parent e68a41c50f
commit 601766bdaf
No known key found for this signature in database
GPG Key ID: 2D767DB92FB6C246

View File

@ -4901,7 +4901,7 @@ verify_algo_params() {
"verify_algo_params - easyrsa_mktemp EASYRSA_ALGO_PARAMS"
# Create the required ecparams file
easyrsa_openssl ecparam -name "$EASYRSA_CURVE" \
"$EASYRSA_OPENSSL" ecparam -name "$EASYRSA_CURVE" \
-out "$EASYRSA_ALGO_PARAMS" \
1>/dev/null || die "\
Failed to generate ecparam file (permissions?) at: