libressl: use make_ssl_config and safessl-easyrsa.cnf for build_ca
This commit is contained in:
parent
af9b01944e
commit
95871dca5e
@ -527,11 +527,15 @@ current CA keypair. If you intended to start a new CA, run init-pki first."
|
|||||||
"$EASYRSA_OPENSSL" ecparam -in "$EASYRSA_ALGO_PARAMS" -genkey | \
|
"$EASYRSA_OPENSSL" ecparam -in "$EASYRSA_ALGO_PARAMS" -genkey | \
|
||||||
"$EASYRSA_OPENSSL" ec -out "$out_key_tmp" $crypto_opts
|
"$EASYRSA_OPENSSL" ec -out "$out_key_tmp" $crypto_opts
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# make safessl-easyrsa.cnf
|
||||||
|
make_ssl_config
|
||||||
|
|
||||||
# create the CA keypair:
|
# create the CA keypair:
|
||||||
[ ! $nopass ] && crypto_opts="-passin file:$out_key_pass_tmp"
|
[ ! $nopass ] && crypto_opts="-passin file:$out_key_pass_tmp"
|
||||||
#shellcheck disable=SC2086
|
#shellcheck disable=SC2086
|
||||||
"$EASYRSA_OPENSSL" req -utf8 -new -key "$out_key_tmp" \
|
"$EASYRSA_OPENSSL" req -utf8 -new -key "$out_key_tmp" \
|
||||||
-config "$EASYRSA_SSL_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" $crypto_opts $opts || \
|
-config "$EASYRSA_SAFE_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" $crypto_opts $opts || \
|
||||||
die "Failed to build the CA"
|
die "Failed to build the CA"
|
||||||
|
|
||||||
mv "$out_key_tmp" "$out_key"; EASYRSA_TEMP_FILE_2=
|
mv "$out_key_tmp" "$out_key"; EASYRSA_TEMP_FILE_2=
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user