From 95871dca5e44464b0219f8562f23dda37d185422 Mon Sep 17 00:00:00 2001 From: Richard Bonhomme Date: Thu, 23 Aug 2018 21:05:26 +0100 Subject: [PATCH] libressl: use make_ssl_config and safessl-easyrsa.cnf for build_ca --- easyrsa3/easyrsa | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index 5d6ffd7..a325e73 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -527,11 +527,15 @@ current CA keypair. If you intended to start a new CA, run init-pki first." "$EASYRSA_OPENSSL" ecparam -in "$EASYRSA_ALGO_PARAMS" -genkey | \ "$EASYRSA_OPENSSL" ec -out "$out_key_tmp" $crypto_opts fi + + # make safessl-easyrsa.cnf + make_ssl_config + # create the CA keypair: [ ! $nopass ] && crypto_opts="-passin file:$out_key_pass_tmp" #shellcheck disable=SC2086 "$EASYRSA_OPENSSL" req -utf8 -new -key "$out_key_tmp" \ - -config "$EASYRSA_SSL_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" $crypto_opts $opts || \ + -config "$EASYRSA_SAFE_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" $crypto_opts $opts || \ die "Failed to build the CA" mv "$out_key_tmp" "$out_key"; EASYRSA_TEMP_FILE_2=