merge branch 'honor-vars' of https://github.com/Antagonym/easy-rsa into v3.0.5
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
This commit is contained in:
commit
d37a608944
@ -486,12 +486,17 @@ current CA keypair. If you intended to start a new CA, run init-pki first."
|
|||||||
die "Passphrases do not match."
|
die "Passphrases do not match."
|
||||||
fi
|
fi
|
||||||
# create the CA key using AES256
|
# create the CA key using AES256
|
||||||
"$EASYRSA_OPENSSL" genrsa -aes256 -out "$out_key_tmp" -passout file:"$out_key_pass_tmp"
|
if [ "$EASYRSA_ALGO" = "rsa" ]; then
|
||||||
|
"$EASYRSA_OPENSSL" genrsa "$crypto" -out "$out_key_tmp" -passout file:"$out_key_pass_tmp" "$EASYRSA_ALGO_PARAMS"
|
||||||
|
elif [ "$EASYRSA_ALGO" = "ec" ]; then
|
||||||
|
"$EASYRSA_OPENSSL" ecparam -in "$EASYRSA_ALGO_PARAMS" -genkey | "$EASYRSA_OPENSSL" ec "$crypto" -out "$out_key_tmp" -passout file:"$out_key_pass_tmp"
|
||||||
|
fi
|
||||||
# create the CA keypair:
|
# create the CA keypair:
|
||||||
#shellcheck disable=SC2086
|
#shellcheck disable=SC2086
|
||||||
"$EASYRSA_OPENSSL" req -utf8 -new -key "$out_key_tmp" \
|
"$EASYRSA_OPENSSL" req -utf8 -new -key "$out_key_tmp" \
|
||||||
-config "$EASYRSA_SSL_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" -passin file:"$out_key_pass_tmp" $opts || \
|
-config "$EASYRSA_SSL_CONF" -keyout "$out_key_tmp" -out "$out_file_tmp" -passin file:"$out_key_pass_tmp" $opts || \
|
||||||
die "Failed to build the CA"
|
die "Failed to build the CA"
|
||||||
|
|
||||||
mv "$out_key_tmp" "$out_key"; EASYRSA_TEMP_FILE_2=
|
mv "$out_key_tmp" "$out_key"; EASYRSA_TEMP_FILE_2=
|
||||||
mv "$out_file_tmp" "$out_file"; EASYRSA_TEMP_FILE_3=
|
mv "$out_file_tmp" "$out_file"; EASYRSA_TEMP_FILE_3=
|
||||||
rm "$out_key_pass_tmp"
|
rm "$out_key_pass_tmp"
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user