Skip to content

Commit

Permalink
source_vars: FATAL error when default 'pki/vars' sets a different PKI
Browse files Browse the repository at this point in the history
Previously, this was a warning and confirmation to continue.
Changed to, NEVER allow this invalid configuration.

Signed-off-by: Richard T Bonhomme <[email protected]>
  • Loading branch information
TinCanTech committed Sep 5, 2023
1 parent a68edb3 commit bb1adae
Showing 1 changed file with 3 additions and 9 deletions.
12 changes: 3 additions & 9 deletions easyrsa3/easyrsa
Original file line number Diff line number Diff line change
Expand Up @@ -5887,22 +5887,16 @@ Algorithm '$EASYRSA_ALGO' is invalid: Must be 'rsa', 'ec' or 'ed'"
: # ok
else
# Show warning
warn "\
user_error "\
'EASYRSA_PKI' is set incorrectly in the 'vars' file.

This vars file:
* $vars

Uses this PKI:
* $EASYRSA_PKI"
* $EASYRSA_PKI

# Require user consent to continue
confirm "\
Continue with invalid configuration ? " yes "
'vars' configuration for 'EASYRSA_PKI' is invalid."

verbose "\
source_vars: Invalid PKI accepted for EASYRSA_PKI"
Cannot continue with invalid configuration."
fi
fi

Expand Down

0 comments on commit bb1adae

Please sign in to comment.