gf4
/
wagon
2
0
Fork 0
Code Issues 3 Pull Requests Projects Releases Wiki Activity

fix: 🐛 Use random CA serial numbers 

man openssl-x509: If the -CA option is specified and neither <-CAserial> or <-CAcreateserial> is given and the default serial number file does not exist, a random number is generated; this is the recommended practice.
master
Keith Irwin 2024-01-01 11:00:12 -07:00
parent 3922cb225a
commit e484075046
Signed by: ki9
GPG Key ID: DF773B3F4A88DA86
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
back/lib/ssl_peer_add
View File

@ -54,7 +54,7 @@ if ! sudo /usr/bin/openssl req -new -sha384 -reqexts SAN -extensions SAN \
fi
# Generate cert
if ! sudo /usr/bin/openssl x509 -req -sha384 -extensions SAN -CAserial \
if ! sudo /usr/bin/openssl x509 -req -sha384 -extensions SAN \
-extfile "${SSL_CONFIG_DIR}/${username}/${hostname}.cnf" \
-in "${SSL_CONFIG_DIR}/${username}/${hostname}.csr" \
-CA "${SSL_CA_CERT}" -CAkey "${SSL_CA_KEY}" \