From 4567091c1f7151546b91a4229003fa0d7619c70d Mon Sep 17 00:00:00 2001 From: Richard T Bonhomme Date: Sat, 30 Jul 2022 11:57:38 +0100 Subject: [PATCH] Upgrade-23: Assign a secure session for temporary directory To create Easyrsa Safe SSL config file, a standard temporary directory is required, which can only be created after a secure session has been assigned. Closes: #622 Signed-off-by: Richard T Bonhomme --- easyrsa3/easyrsa | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index 81962b3..e3c85ae 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -4100,6 +4100,15 @@ up23_create_openssl_cnf () up23_verbose "> OK" up23_verbose " New OpenSSL config file created in: $EASYRSA_PKI_SSL_CNFFILE" + # Create secure session + # Because the upgrade runs twice, once as a test and then for real + # EASYRSA_TEMP_DIR_session must be unset to avoid overload error + [ "$EASYRSA_TEMP_DIR_session" ] && unset EASYRSA_TEMP_DIR_session + up23_verbose "> Create secure session" + secure_session || die "up23_create_openssl_cnf - secure_session failed." + up23_verbose "> OK" + up23_verbose " secure session: $EASYRSA_TEMP_DIR_session" + # Create $EASYRSA_PKI/safessl-easyrsa.cnf easyrsa_openssl makesafeconf if [ -f "$EASYRSA_PKI_SAFE_CNFFILE" ]