sign-req: Confirm Netscape extension use immediately

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
This commit is contained in:
Richard T Bonhomme 2023-07-16 02:46:30 +01:00
parent c03e1eef84
commit a1c9b016b2
No known key found for this signature in database
GPG Key ID: 2D767DB92FB6C246

View File

@ -2307,6 +2307,9 @@ basicConstraints is not defined, cannot use 'pathlen'"
case "$EASYRSA_NS_SUPPORT" in
[yY][eE][sS])
confirm "Confirm use of Netscape extensions: " yes \
"WARNING: Netscape extensions are DEPRECATED!"
# Netscape extension
case "$crt_type" in
serverClient)
@ -2407,15 +2410,6 @@ $crt_type certificate ${valid_period}:
$(display_dn req "$req_in")" # => confirm end
# Confirm deprecated use of NS extensions
case "$EASYRSA_NS_SUPPORT" in
[yY][eE][sS])
confirm "Confirm use of Netscape extensions: " yes \
"WARNING: Netscape extensions are DEPRECATED!"
;;
*) : #ok
esac
# Assign temp cert file
crt_out_tmp=""
easyrsa_mktemp crt_out_tmp || \