starred/dehydrated
1
0
Fork 0
mirror of https://github.com/dehydrated-io/dehydrated.git synced 2026-07-12 16:12:45 +02:00
Code Issues 79 Packages Projects Releases 10 Wiki Activity

use temporary openssl config instead of weird fake fds (fixes #57)

Browse Source
This commit is contained in:
Lukas Schauer
2015-12-19 01:57:58 +01:00
parent 338ec30853
commit 9e79c066d5
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
letsencrypt.sh
+7 -3
View File
@@ -215,7 +215,7 @@ _request() {
echo " + ERROR: An error occurred while sending ${1}-request to ${2} (Status ${statuscode})" >&2 echo " + ERROR: An error occurred while sending ${1}-request to ${2} (Status ${statuscode})" >&2
echo >&2 echo >&2
echo "Details:" >&2 echo "Details:" >&2
echo "$(<"${tempcont}"))" >&2 cat "${tempcont}" >&2
rm -f "${tempcont}" rm -f "${tempcont}"
# Wait for hook script to clean the challenge if used # Wait for hook script to clean the challenge if used
@@ -306,7 +306,11 @@ sign_domain() {
done done
SAN="${SAN%%, }" SAN="${SAN%%, }"
echo " + Generating signing request..." echo " + Generating signing request..."
openssl req -new -sha256 -key "${BASEDIR}/certs/${domain}/${privkey}" -out "${BASEDIR}/certs/${domain}/cert-${timestamp}.csr" -subj "/CN=${domain}/" -reqexts SAN -config <(cat "${OPENSSL_CNF}" <(printf "[SAN]\nsubjectAltName=%s" "${SAN}")) local tmp_openssl_cnf="$(mktemp)"
cat $OPENSSL_CNF > "${tmp_openssl_cnf}"
printf "[SAN]\nsubjectAltName=%s" "${SAN}" >> "${tmp_openssl_cnf}"
openssl req -new -sha256 -key "${BASEDIR}/certs/${domain}/${privkey}" -out "${BASEDIR}/certs/${domain}/cert-${timestamp}.csr" -subj "/CN=${domain}/" -reqexts SAN -config "${tmp_openssl_cnf}"
rm -f "${tmp_openssl_cnf}"
# Request and respond to challenges # Request and respond to challenges
for altname in $altnames; do for altname in $altnames; do
@@ -469,7 +473,7 @@ command_sign_domains() {
# remove temporary domains.txt file if used # remove temporary domains.txt file if used
if [[ -n "${PARAM_DOMAIN:-}" ]]; then if [[ -n "${PARAM_DOMAIN:-}" ]]; then
rm "${DOMAINS_TXT}" rm -f "${DOMAINS_TXT}"
fi fi
} }