nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check for EASYRSA_PASSIN and EASYRSA_PASSOUT vars in config file

Browse Source 
and refuse to continue if they are present there, as they might containg
passwords.
This commit is contained in:
Peter Schiffer 2020-03-26 23:51:02 +01:00
parent f4b4308f16
commit f390dbebc1
No known key found for this signature in database
GPG Key ID: 6CCC5046E2B0B44B
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
easyrsa3/easyrsa
View File

@ -1645,6 +1645,12 @@ vars_setup() {
# If a vars file was located, source it
# If $EASYRSA_NO_VARS is defined (not blank) this is skipped
if [ -z "$EASYRSA_NO_VARS" ] && [ -n "$vars" ]; then
if grep -Eq 'EASYRSA_PASSIN|EASYRSA_PASSOUT' "$vars"; then
die "\
Variable EASYRSA_PASSIN or EASYRSA_PASSOUT has been found in the configuration \
file. Storing sensitive information in the configuration file is not \
recommended - please remove it from there before continuing."
fi
#shellcheck disable=SC2034
EASYRSA_CALLER=1
# shellcheck disable=SC1090