starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-07-13 16:42:53 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

Avoid writing ec-parameters to private-key file (fixes #830)

Browse Source
This commit is contained in:
Lukas Schauer
2021-10-31 20:20:40 +01:00
parent 880c99aa63
commit 607a6088d3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dehydrated
+2 -2
View File
@@ -1343,7 +1343,7 @@ sign_domain() {
tmp_privkey="$(_mktemp)" tmp_privkey="$(_mktemp)"
case "${KEY_ALGO}" in case "${KEY_ALGO}" in
rsa) _openssl genrsa -out "${tmp_privkey}" "${KEYSIZE}";; rsa) _openssl genrsa -out "${tmp_privkey}" "${KEYSIZE}";;
prime256v1|secp384r1) _openssl ecparam -genkey -name "${KEY_ALGO}" -out "${tmp_privkey}";; prime256v1|secp384r1) _openssl ecparam -genkey -name "${KEY_ALGO}" -out "${tmp_privkey}" -noout;;
esac esac
cat "${tmp_privkey}" > "${certdir}/privkey-${timestamp}.pem" cat "${tmp_privkey}" > "${certdir}/privkey-${timestamp}.pem"
rm "${tmp_privkey}" rm "${tmp_privkey}"
@@ -1360,7 +1360,7 @@ sign_domain() {
echo " + Generating private rollover key..." echo " + Generating private rollover key..."
case "${KEY_ALGO}" in case "${KEY_ALGO}" in
rsa) _openssl genrsa -out "${certdir}/privkey.roll.pem" "${KEYSIZE}";; rsa) _openssl genrsa -out "${certdir}/privkey.roll.pem" "${KEYSIZE}";;
prime256v1|secp384r1) _openssl ecparam -genkey -name "${KEY_ALGO}" -out "${certdir}/privkey.roll.pem";; prime256v1|secp384r1) _openssl ecparam -genkey -name "${KEY_ALGO}" -out "${certdir}/privkey.roll.pem" -noout;;
esac esac
fi fi
# delete rolloverkeys if disabled # delete rolloverkeys if disabled