Prune make_ssl_config

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
This commit is contained in:
Richard Bonhomme 2019-02-06 20:05:42 +00:00
parent 205510bfab
commit cedd50e01e
No known key found for this signature in database
GPG Key ID: D7D49FA009D95091

View File

@ -583,9 +583,6 @@ current CA keypair. If you intended to start a new CA, run init-pki first."
"$EASYRSA_OPENSSL" ec -out "$out_key_tmp" $crypto_opts
fi
# make safessl-easyrsa.cnf
#make_ssl_config
# create the CA keypair:
[ ! $nopass ] && crypto_opts="-passin file:$out_key_pass_tmp"
#shellcheck disable=SC2086
@ -681,9 +678,6 @@ $EASYRSA_EXTRA_EXTS"
EASYRSA_SSL_CONF="$EASYRSA_TEMP_CONF"
fi
# make safessl-easyrsa.cnf
#make_ssl_config
key_out_tmp="$(mktemp "$key_out.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_2="$key_out_tmp"
req_out_tmp="$(mktemp "$req_out.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_3="$req_out_tmp"
# generate request
@ -801,9 +795,6 @@ $(display_dn req "$req_in")
Failed to create temp extension file (bad permissions?) at:
$EASYRSA_TEMP_EXT"
# make safessl-easyrsa.cnf
#make_ssl_config
# sign request
# shellcheck disable=SC2086
crt_out_tmp="$(mktemp "$crt_out.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_2="$crt_out_tmp"
@ -892,9 +883,6 @@ $(display_dn x509 "$crt_in")
Unable to revoke as no certificate was found. Certificate was expected
at: $crt_in"
# make safessl-easyrsa.cnf
#make_ssl_config
# shellcheck disable=SC2086
"$EASYRSA_OPENSSL" ca -utf8 -revoke "$crt_in" -config "$EASYRSA_SAFE_CONF" $opts || die "\
Failed to revoke certificate: revocation command failed."
@ -1002,9 +990,6 @@ $(display_dn x509 "$crt_in")
Unable to renew as no certificate was found. Certificate was expected
at: $crt_in"
# make safessl-easyrsa.cnf
#make_ssl_config
# Check if old cert is expired or expires within 30 days
expire_date=$(
"$EASYRSA_OPENSSL" x509 -in "$crt_in" -noout -enddate |
@ -1137,9 +1122,6 @@ input in file: $req_in"
gen_crl() {
verify_ca_init
# make safessl-easyrsa.cnf
#make_ssl_config
out_file="$EASYRSA_PKI/crl.pem"
out_file_tmp="$(mktemp "$out_file.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_2="$out_file_tmp"
"$EASYRSA_OPENSSL" ca -utf8 -gencrl -out "$out_file_tmp" -config "$EASYRSA_SAFE_CONF" || die "\