|
 |
d738b9 |
From db667872d9a4103ffc30d4bd570a378a184d7c7f Mon Sep 17 00:00:00 2001
|
|
|
d738b9 |
From: Robbie Harwood <rharwood@redhat.com>
|
|
|
d738b9 |
Date: Thu, 3 May 2018 14:40:45 -0400
|
|
|
d738b9 |
Subject: [PATCH] Remove "-nodes" option from make-certs scripts
|
|
|
d738b9 |
|
|
|
d738b9 |
The openssl command does not recognize options after positional
|
|
|
d738b9 |
arguments, so in "openssl genrsa $KEYSIZE -nodes", the "-nodes" was
|
|
|
d738b9 |
ignored as a excess positional argument prior to OpenSSL 1.1.0h, and
|
|
|
d738b9 |
now causes an error. "-nodes" is an option to the openssl req and
|
|
|
d738b9 |
pkcs12 subcommands, but genrsa creates unencrypted keys by default.
|
|
|
d738b9 |
|
|
|
d738b9 |
[ghudson@mit.edu: edited commit message]
|
|
|
d738b9 |
|
|
|
d738b9 |
(cherry picked from commit 928a36aae326d496c9a73f2cd41b4da45eef577c)
|
|
|
d738b9 |
(cherry picked from commit 83da5675551dba13fee837adc26ce885a061dbc1)
|
|
|
d738b9 |
---
|
|
|
d738b9 |
src/tests/dejagnu/pkinit-certs/make-certs.sh | 2 +-
|
|
|
d738b9 |
src/tests/dejagnu/proxy-certs/make-certs.sh | 2 +-
|
|
|
d738b9 |
2 files changed, 2 insertions(+), 2 deletions(-)
|
|
|
d738b9 |
|
|
|
d738b9 |
diff --git a/src/tests/dejagnu/pkinit-certs/make-certs.sh b/src/tests/dejagnu/pkinit-certs/make-certs.sh
|
|
|
d738b9 |
index 23426af8a..fa937f449 100755
|
|
|
d738b9 |
--- a/src/tests/dejagnu/pkinit-certs/make-certs.sh
|
|
|
d738b9 |
+++ b/src/tests/dejagnu/pkinit-certs/make-certs.sh
|
|
|
d738b9 |
@@ -114,7 +114,7 @@ extendedKeyUsage = $CLIENT_EKU_LIST
|
|
|
d738b9 |
EOF
|
|
|
d738b9 |
|
|
|
d738b9 |
# Generate a private key.
|
|
|
d738b9 |
-openssl genrsa $KEYSIZE -nodes > privkey.pem
|
|
|
d738b9 |
+openssl genrsa $KEYSIZE > privkey.pem
|
|
|
d738b9 |
openssl rsa -in privkey.pem -out privkey-enc.pem -des3 -passout pass:encrypted
|
|
|
d738b9 |
|
|
|
d738b9 |
# Generate a "CA" certificate.
|
|
|
d738b9 |
diff --git a/src/tests/dejagnu/proxy-certs/make-certs.sh b/src/tests/dejagnu/proxy-certs/make-certs.sh
|
|
|
d738b9 |
index 1191bf05e..24ef91bde 100755
|
|
|
d738b9 |
--- a/src/tests/dejagnu/proxy-certs/make-certs.sh
|
|
|
d738b9 |
+++ b/src/tests/dejagnu/proxy-certs/make-certs.sh
|
|
|
d738b9 |
@@ -79,7 +79,7 @@ extendedKeyUsage = $PROXY_EKU_LIST
|
|
|
d738b9 |
EOF
|
|
|
d738b9 |
|
|
|
d738b9 |
# Generate a private key.
|
|
|
d738b9 |
-openssl genrsa $KEYSIZE -nodes > privkey.pem
|
|
|
d738b9 |
+openssl genrsa $KEYSIZE > privkey.pem
|
|
|
d738b9 |
|
|
|
d738b9 |
# Generate a "CA" certificate.
|
|
|
d738b9 |
SUBJECT=signer openssl req -config openssl.cnf -new -x509 -extensions exts_ca \
|