Skip to content

Commit

Permalink
Merge branch 'inline-quiet-vars' of ssh://github.com/TinCanTech/easy-…
Browse files Browse the repository at this point in the history
…rsa into TinCanTech-inline-quiet-vars

Signed-off-by: Richard T Bonhomme <[email protected]>
  • Loading branch information
TinCanTech committed Apr 22, 2024
2 parents 2cd7d45 + 451258c commit 3f3e081
Showing 1 changed file with 28 additions and 2 deletions.
30 changes: 28 additions & 2 deletions easyrsa3/easyrsa
Original file line number Diff line number Diff line change
Expand Up @@ -2681,8 +2681,30 @@ inline_creds() {
# Generate data
if [ -e "$crt_source" ]; then
# Get EasyRSA cert type, ignore error
type_data=
ssl_cert_x509v3_eku "$crt_source" type_data || :

# Check for self-signed cert
if "$EASYRSA_OPENSSL" x509 -in "$crt_source" \
-noout -text | grep -q 'CA:TRUE'
then
# If called by command 'inline' then generate FP
if [ -z "$selfsign_eku" ]; then
# build a self-signed inline file
selfsign_eku=1

# Generate fingerprint for inline file
crt_fingerprint="$(
"$EASYRSA_OPENSSL" x509 -in "$crt_source" \
-noout -sha256 -fingerprint
)" || die "build_self_sign - Failed -fingerprint"
# strip prefix
crt_fingerprint="${crt_fingerprint#*=}"
fi
else
selfsign_details=
fi

# self-signed details
if [ "$selfsign_eku" ]; then
selfsign_details="
Expand Down Expand Up @@ -2722,7 +2744,7 @@ $(cat "$key_source")

# CA certificate
if [ "$selfsign_eku" ]; then
: # ok
ca_data="# Self-signed certificate, CA is not required."
else
if [ -e "$ca_source" ]; then
ca_data="\
Expand Down Expand Up @@ -5291,9 +5313,13 @@ case "$cmd" in
*)
require_pki=1
case "$cmd" in
gen-req|gen-dh|build-ca|show-req|export-p*|inline)
gen-req|gen-dh|build-ca|show-req|export-p*)
: # ok
;;
inline)
unset -v EASYRSA_VERBOSE
EASYRSA_SILENT=1
;;
self-sign-*)
: # ok
;;
Expand Down

0 comments on commit 3f3e081

Please sign in to comment.