vars: WARN use of 'export' and 'unset' in vars file

Use 'set_var' (Supported) or 'force_set_var' (User discretion)

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
This commit is contained in:
Richard T Bonhomme 2023-04-13 23:22:13 +01:00
parent 2ed6c9d5b2
commit 7be58ded91
No known key found for this signature in database
GPG Key ID: 2D767DB92FB6C246

View File

@ -5021,8 +5021,8 @@ Using Easy-RSA configuration:
# Sanitize vars
if grep -q \
-e 'EASYRSA_PASSIN' -e 'EASYRSA_PASSOUT' \
-e '^[^#]*export *_*[[:alpha:]]*[[:alnum:]]*.*$' \
-e '[^(]`[^)]' "$vars"
-e '[^(]`[^)]' \
"$vars"
then
die "\
One or more of these problems has been found in your 'vars' file:
@ -5030,15 +5030,27 @@ One or more of these problems has been found in your 'vars' file:
* Use of 'EASYRSA_PASSIN' or 'EASYRSA_PASSOUT':
Storing password information in the 'vars' file is not permitted.
* Use of 'export':
Remove 'export' or replace it with 'set_var'.
* Use of unsupported characters:
These characters are not supported: \` backtick
Please, correct these errors and try again."
fi
if grep -q \
-e '[[:blank:]]export[[:blank:]]' \
-e '[[:blank:]]unset[[:blank:]]' \
"$vars"
then
warn "\
One or more of these problems has been found in your 'vars' file:
* Use of 'export':
Remove 'export' or replace it with 'set_var'.
* Use of 'unset':
Remove 'unset' ('force_set_var' may also work)."
fi
# Enable sourcing 'vars'
# shellcheck disable=SC2034 # appears unused
EASYRSA_CALLER=1