From 6c171b7882c516faeaceea317024564a21f5ce0f Mon Sep 17 00:00:00 2001 From: Richard Bonhomme Date: Thu, 23 Aug 2018 20:22:43 +0100 Subject: [PATCH] libressl: switch to using safessl-easyrsa.cnf Keep openssl-easyrsa.cnf but switch to using safessl-easyrsa.cnf Has the benefit of fixing easyrsa3 openssl version check for libressl --- easyrsa3/easyrsa | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index 467dc6d..0aaec32 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -1162,7 +1162,9 @@ Note: using Easy-RSA configuration from: $vars" # Detect openssl config, preferring EASYRSA_PKI over EASYRSA if [ -f "$EASYRSA_PKI/openssl-easyrsa.cnf" ]; then set_var EASYRSA_SSL_CONF "$EASYRSA_PKI/openssl-easyrsa.cnf" + set_var EASYRSA_SAFE_CONF "$EASYRSA_PKI/safessl-easyrsa.cnf" else set_var EASYRSA_SSL_CONF "$EASYRSA/openssl-easyrsa.cnf" + set_var EASYRSA_SAFE_CONF "$EASYRSA/safessl-easyrsa.cnf" fi # Same as above for the x509-types extensions dir @@ -1181,7 +1183,7 @@ Note: using Easy-RSA configuration from: $vars" fi # Setting OPENSSL_CONF prevents bogus warnings (especially useful on win32) - export OPENSSL_CONF="$EASYRSA_SSL_CONF" + export OPENSSL_CONF="$EASYRSA_SAFE_CONF" } # vars_setup() # variable assignment by indirection when undefined; merely exports