[PR #424] [CLOSED] configurable OPENSSL variable for each certificate. #830

New Issue

adam · 2025-12-29T01:29:32+01:00

adam commented

2025-12-29 01:29:32 +01:00

📋 Pull Request Information

Original PR: https://github.com/dehydrated-io/dehydrated/pull/424
Author: @nanorkyo
Created: 8/18/2017
Status: ❌ Closed

Base: master ← Head: master

📝 Commits (2)

e42667b OPENSSL variable configurable for each certificate.
a7786de merge branch from v0.4.0-OPENSSL-each-cert.

📊 Changes

1 file changed (+5 additions, -3 deletions)

View changed files

📝 dehydrated (+5 -3)

📄 Description

I want to sign any certificates from custom CSRs generated by appliance equipments, which are HPE iLO4, Infoblox and others. Almost #377 is same, but not different approch.

I decided to make OPENSSL variable configurable for each certificate, like OPENSSL=APPLIANCE_openssl in ${certdir}/config, not only global.

If APPLIANCE_openssl called req -new ... from dehydrated, it call Generate CSR API to its own appliance equipment like following.

ilo4_openssl () {
if ; then
shift 2
while [ "$#" -gt 0 ]; do
case "${1}" in
-out)
ilo4_GenerateCSR $(basename $(dirname ${2})) ${2}
;;
*)
;;
esac
shift
done
else
openssl "${@}"
fi
}

I'm tested on following environment.

FreeBSD 11.1-R
dehydrated v0.4.0 from ports and customed.
target appliances: HPE iLO4, Infoblox TE-1410(Grid Manager)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/dehydrated-io/dehydrated/pull/424 **Author:** [@nanorkyo](https://github.com/nanorkyo) **Created:** 8/18/2017 **Status:** ❌ Closed **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (2) - [`e42667b`](https://github.com/dehydrated-io/dehydrated/commit/e42667b7e29e15b0342817fa07b8d4d187cac8fd) OPENSSL variable configurable for each certificate. - [`a7786de`](https://github.com/dehydrated-io/dehydrated/commit/a7786de5f86a3c2eee3daec563216c97c407cf2e) merge branch from v0.4.0-OPENSSL-each-cert. ### 📊 Changes **1 file changed** (+5 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `dehydrated` (+5 -3) </details> ### 📄 Description I want to sign any certificates from custom CSRs generated by appliance equipments, which are HPE iLO4, Infoblox and others. Almost #377 is same, but not different approch. I decided to make OPENSSL variable configurable for each certificate, like `OPENSSL=APPLIANCE_openssl` in ${certdir}/config, not only global. If **_APPLIANCE_**_openssl called `req -new ...` from dehydrated, it call Generate CSR API to its own appliance equipment like following. > ilo4_openssl () { > if [[ x"${1:-}${2:-}" = x"req-new" ]]; then > shift 2 > while [ "$#" -gt 0 ]; do > case "${1}" in > -out) > ilo4_GenerateCSR $(basename $(dirname ${2})) ${2} > ;; > *) > ;; > esac > shift > done > else > openssl "${@}" > fi > } I'm tested on following environment. - FreeBSD 11.1-R - dehydrated v0.4.0 from ports and customed. - target appliances: HPE iLO4, Infoblox TE-1410(Grid Manager) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

adam added the pull-request label 2025-12-29 01:29:32 +01:00

adam closed this issue

2025-12-29 01:29:32 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#830