Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce Global Safe SSL config and Local SSL config #1163

Merged
merged 12 commits into from
Jun 8, 2024
Merged

Introduce Global Safe SSL config and Local SSL config #1163

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
b18fe38
Introduce Global Safe SSL config and Local SSL config
TinCanTech Jun 5, 2024
0149387
Set $ssl_cnf_type during verify_ssl_lib()
TinCanTech Jun 5, 2024
d719750
Move 'sed' expansion of SSL config to write_easyrsa_ssl_cnf_tmp()
TinCanTech Jun 5, 2024
c68a442
verify_file(): Call SSL library directly
TinCanTech Jun 5, 2024
c4afbf5
Remove --old-safe-ssl $EASYRSA_LEGACY_SAFE_SSL
TinCanTech Jun 5, 2024
5343fbb
Do not set EASYRSA_SSL_CONF to the generated GLOBAL SSL config file
TinCanTech Jun 7, 2024
4d9289a
Move $EASYRSA_FORCE_SAFE_SSL control of ssl_cnf_type
TinCanTech Jun 7, 2024
ca3c963
write_x509_type_tmp(): Verify x509-type before redirect
TinCanTech Jun 7, 2024
24ad15b
escape_hazard(): Sourcing file, add shellcheck disable directive
TinCanTech Jun 7, 2024
c0df0fe
Rename write() internally, to write_legacy_file(); maintenance improv…
TinCanTech Jun 8, 2024
75669d2
build_self_sign(): Resrict use of --req-cn and create LOCAL SSL config
TinCanTech Jun 8, 2024
11c5ca3
build_self_sign(): Use temp-files for key/cert output
TinCanTech Jun 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion dev/easyrsa-tools.lib
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -498,7 +498,7 @@ read_db() {
secure_session || \
die "read_db - secure_session"
# Recreate openssl-easyrsa.cnf (Temp)
write_easyrsa_ssl_cnf_tmp
write_global_safe_ssl_cnf_tmp

# Interpret the db/certificate record
unset -v db_serial db_cn db_revoke_date db_reason
Expand Down
Loading