From 601766bdafdea56ea5519f7d2829d8ef38e4cb53 Mon Sep 17 00:00:00 2001 From: Richard T Bonhomme Date: Sat, 6 May 2023 15:44:38 +0100 Subject: [PATCH] verify_algo_params(): Call SSL lib via EASYRSA_OPENSSL verify_algo_params() expects errors when settings are not corrrect. Therefore, is must not use easyrsa_openssl() meta-wrapper, which would error out with a misleading error message. Fixing this also ensures that the SAFE SSL config is not built prior to EASYRSA_REQ_CN being set. Signed-off-by: Richard T Bonhomme --- easyrsa3/easyrsa | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index ff8f055..d8a03e8 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -4901,7 +4901,7 @@ verify_algo_params() { "verify_algo_params - easyrsa_mktemp EASYRSA_ALGO_PARAMS" # Create the required ecparams file - easyrsa_openssl ecparam -name "$EASYRSA_CURVE" \ + "$EASYRSA_OPENSSL" ecparam -name "$EASYRSA_CURVE" \ -out "$EASYRSA_ALGO_PARAMS" \ 1>/dev/null || die "\ Failed to generate ecparam file (permissions?) at: