nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libressl: use make_ssl_config and safessl-easyrsa.cnf for sign_req

Browse Source
This commit is contained in:
Richard Bonhomme 2018-08-23 21:12:39 +01:00
parent 95d26a3840
commit 93785e1e25
No known key found for this signature in database
GPG Key ID: C7423CEDFEFCE950
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
easyrsa3/easyrsa
View File

@ -745,10 +745,13 @@ $(display_dn req "$req_in")
Failed to create temp extension file (bad permissions?) at:
$EASYRSA_TEMP_EXT"
# make safessl-easyrsa.cnf
make_ssl_config
# sign request
# shellcheck disable=SC2086
crt_out_tmp="$(mktemp "$crt_out.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_2="$crt_out_tmp"
"$EASYRSA_OPENSSL" ca -utf8 -in "$req_in" -out "$crt_out_tmp" -config "$EASYRSA_SSL_CONF" \
"$EASYRSA_OPENSSL" ca -utf8 -in "$req_in" -out "$crt_out_tmp" -config "$EASYRSA_SAFE_CONF" \
-extfile "$EASYRSA_TEMP_EXT" -days "$EASYRSA_CERT_EXPIRE" -batch $opts \
|| die "signing failed (openssl output above may have more detail)"
mv "$crt_out_tmp" "$crt_out"; EASYRSA_TEMP_FILE_2=