nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

escape_hazard(): Test sourcing vars:org fields via subshell first

Browse Source 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
This commit is contained in:
Richard T Bonhomme 2023-03-11 02:53:05 +00:00
parent 9fec600274
commit 7f6f2562b2
No known key found for this signature in database
GPG Key ID: 2D767DB92FB6C246
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
easyrsa3/easyrsa
View File

@ -776,8 +776,9 @@ escape_hazard - Failed to write temp-file"
# Reload fields from fully escaped temp-file
# shellcheck disable=SC1090 # can't follow non-constant source.
. "$easyrsa_vars_org" || die "\
(. "$easyrsa_vars_org") || die "\
escape_hazard - Failed to source temp-file"
. "$easyrsa_vars_org"
} # => escape_hazard()
# Replace environment variable names with current value
@ -865,7 +866,7 @@ easyrsa_openssl() {
# '$' - Workaround 'easyrsa' based limitation
# This is required for all SSL libs, otherwise,
# there are unacceptable differences in behavior
escape_hazard
escape_hazard || die "easyrsa_openssl - escape_hazard failed"
# Make LibreSSL safe config file from OpenSSL config file
# $require_safe_ssl_conf is ALWAYS set by verify_ssl_lib()