From 791425576092da4f2a289b7a1d028d971fb992c5 Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Wed, 27 Apr 2022 03:28:23 +0100
Subject: [PATCH] Add "reason" check

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 easyrsa3/easyrsa | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index f46ae20..96d5c9d 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1398,6 +1398,18 @@ Run easyrsa without commands for usage and command help."
 	if [ "$1" ]; then
 		crl_reason="$1"
 		shift
+
+		case "$crl_reason" in
+			unspecified | \
+			keyCompromise |\
+			CACompromise | \
+			affiliationChanged | \
+			superseded | \
+			cessationOfOperation | \
+			certificateHold ) : # ok
+			;;
+			*) die "Illegal reason: $crl_reason"
+		esac
 	else
 		unset -v crl_reason
 	fi