nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added passin and passout option to set-rsa-pass, set-ec-pass and export-p12 to allow passowrd scripting

Browse Source
This commit is contained in:
keros 2015-05-13 11:29:42 +00:00
parent cf9e4731b8
commit bd8583b958
1 changed files with 20 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
easyrsa3/easyrsa
View File

@ -131,7 +131,9 @@ cmd_help() {
Export a PKCS#12 file with the keypair specified by <filename_base>" Export a PKCS#12 file with the keypair specified by <filename_base>"
opts=" opts="
noca - do not include the ca.crt file in the PKCS12 output noca - do not include the ca.crt file in the PKCS12 output
nokey - do not include the private key in the PKCS12 output" ;; nokey - do not include the private key in the PKCS12 output
passin arg - (advanced) See PASS PHRASE ARGUMENTS in openssl
passout arg - (advanced) See PASS PHRASE ARGUMENTS in openssl" ;;
export-p7) text=" export-p7) text="
export-p7 <filename_base> [ cmd-opts ] export-p7 <filename_base> [ cmd-opts ]
Export a PKCS#7 file with the pubkey specified by <filename_base>" Export a PKCS#7 file with the pubkey specified by <filename_base>"
@ -143,7 +145,9 @@ cmd_help() {
Set a new passphrase on an RSA or EC key for the listed <filename_base>." Set a new passphrase on an RSA or EC key for the listed <filename_base>."
opts=" opts="
nopass - use no password and leave the key unencrypted nopass - use no password and leave the key unencrypted
file - (advanced) treat the file as a raw path, not a short-name" ;; file - (advanced) treat the file as a raw path, not a short-name
passin arg - (advanced) See PASS PHRASE ARGUMENTS in openssl
passout arg - (advanced) See PASS PHRASE ARGUMENTS in openssl" ;;
altname|subjectaltname|san) text=" altname|subjectaltname|san) text="
--subject-alt-name=SAN_FORMAT_STRING --subject-alt-name=SAN_FORMAT_STRING
This global option adds a subjectAltName to the request or issued This global option adds a subjectAltName to the request or issued
@ -788,10 +792,14 @@ Run easyrsa without commands for usage and command help."
# opts support # opts support
local want_ca=1 local want_ca=1
local want_key=1 local want_key=1
local passin=""
local passout=""
while [ -n "$1" ]; do while [ -n "$1" ]; do
case "$1" in case "$1" in
noca) want_ca= ;; noca) want_ca= ;;
nokey) want_key= ;; nokey) want_key= ;;
passin) shift; passin="-passin $1" ;;
passout) shift; passout="-passout $1" ;;
*) warn "Ignoring unknown command option: '$1'" ;; *) warn "Ignoring unknown command option: '$1'" ;;
esac esac
shift shift
@ -825,7 +833,7 @@ Missing key expected at: $key_in"
# export the p12: # export the p12:
"$EASYRSA_OPENSSL" pkcs12 -in "$crt_in" -inkey "$key_in" -export \ "$EASYRSA_OPENSSL" pkcs12 -in "$crt_in" -inkey "$key_in" -export \
-out "$pkcs_out" $pkcs_opts || die "\ -out "$pkcs_out" $pkcs_opts $passin $passout || die "\
Export of p12 failed: see above for related openssl errors." Export of p12 failed: see above for related openssl errors."
;; ;;
p7) p7)
@ -862,10 +870,14 @@ See help output for usage details."
# parse command options # parse command options
shift 2 shift 2
local crypto="-aes256" local crypto="-aes256"
local passin=""
local passout=""
while [ -n "$1" ]; do while [ -n "$1" ]; do
case "$1" in case "$1" in
nopass) crypto= ;; nopass) crypto= ;;
file) file="$raw_file" ;; file) file="$raw_file" ;;
passin) shift; passin="-passin $1" ;;
passout) shift; passout="-passout $1" ;;
*) warn "Ignoring unknown command option: '$1'" ;; *) warn "Ignoring unknown command option: '$1'" ;;
esac esac
shift shift
@ -879,7 +891,7 @@ $file"
If the key is currently encrypted you must supply the decryption passphrase. If the key is currently encrypted you must supply the decryption passphrase.
${crypto:+You will then enter a new PEM passphrase for this key.$NL}" ${crypto:+You will then enter a new PEM passphrase for this key.$NL}"
"$EASYRSA_OPENSSL" $key_type -in "$file" -out "$file" $crypto || die "\ "$EASYRSA_OPENSSL" $key_type -in "$file" -out "$file" $crypto $passin $passout || die "\
Failed to change the private key passphrase. See above for possible openssl Failed to change the private key passphrase. See above for possible openssl
error messages." error messages."