nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libressl: use make_ssl_config and safessl-easyrsa.cnf for gen_crl

Browse Source
This commit is contained in:
Richard Bonhomme 2018-08-23 21:16:32 +01:00
parent 93785e1e25
commit d1e72d4ea7
No known key found for this signature in database
GPG Key ID: C7423CEDFEFCE950
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
easyrsa3/easyrsa
View File

@ -847,9 +847,12 @@ infrastructure in order to prevent the revoked cert from being accepted.
gen_crl() {
verify_ca_init
# make safessl-easyrsa.cnf
make_ssl_config
out_file="$EASYRSA_PKI/crl.pem"
out_file_tmp="$(mktemp "$out_file.XXXXXXXXXX")"; EASYRSA_TEMP_FILE_2="$out_file_tmp"
"$EASYRSA_OPENSSL" ca -utf8 -gencrl -out "$out_file_tmp" -config "$EASYRSA_SSL_CONF" || die "\
"$EASYRSA_OPENSSL" ca -utf8 -gencrl -out "$out_file_tmp" -config "$EASYRSA_SAFE_CONF" || die "\
CRL Generation failed.
"
mv "$out_file_tmp" "$out_file"; EASYRSA_TEMP_FILE_2=