PATCH: fix csr requests for some openssl versions

Jeremy Allison jra at samba.org
Wed Apr 27 22:52:34 UTC 2016


On Wed, Apr 27, 2016 at 05:00:53PM +0200, Björn JACKE wrote:
> From 7296f3db2514710dd554fc2a22e6134cfb388350 Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Bj=C3=B6rn=20Jacke?= <bj at sernet.de>
> Date: Wed, 27 Apr 2016 16:57:36 +0200
> Subject: [PATCH] testsuit/manage-ca.sh: specify key size in CSRs
> 
> specifying the key size is required by some openssl versions

LGTM. Pushed !

> Signed-off-by: Bjoern Jacke <bj at sernet.de>
> ---
>  selftest/manage-ca/manage-ca.sh | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/selftest/manage-ca/manage-ca.sh b/selftest/manage-ca/manage-ca.sh
> index ab796b7..8e09a93 100755
> --- a/selftest/manage-ca/manage-ca.sh
> +++ b/selftest/manage-ca/manage-ca.sh
> @@ -234,7 +234,7 @@ create_dc)
>  		"${OPENSSLCNF}" \
>  		${DEFAULT_VARS} DC_DNS_NAME DC_OBJECTGUID_HEX
>  
> -	openssl req -new -newkey rsa -keyout "${DCKEY_PEM}" -out "${DCREQ_PEM}" -config "${OPENSSLCNF}"
> +	openssl req -new -newkey rsa:${DC_BITS} -keyout "${DCKEY_PEM}" -out "${DCREQ_PEM}" -config "${OPENSSLCNF}"
>  	openssl rsa -in "${DCKEY_PEM}" -inform PEM -out "${DCKEY_PRIVATE_PEM}" -outform PEM
>  	openssl ca -config "${OPENSSLCNF}" -in "${DCREQ_PEM}" -out "${DCCERT_PEM}"
>  	ln -s "${DCKEY_PRIVATE_PEM_BASE}" "${DCKEY_PRIVATE_PEM_LINK}"
> @@ -326,7 +326,7 @@ create_user)
>  		"${OPENSSLCNF}" \
>  		${DEFAULT_VARS} USER_PRINCIPAL_NAME
>  
> -	openssl req -new -newkey rsa -keyout "${USERKEY_PEM}" -out "${USERREQ_PEM}" -config "${OPENSSLCNF}"
> +	openssl req -new -newkey rsa:${USER_BITS} -keyout "${USERKEY_PEM}" -out "${USERREQ_PEM}" -config "${OPENSSLCNF}"
>  	openssl rsa -in "${USERKEY_PEM}" -inform PEM -out "${USERKEY_PRIVATE_PEM}" -outform PEM
>  	openssl ca -config "${OPENSSLCNF}" -in "${USERREQ_PEM}" -out "${USERCERT_PEM}"
>  	ln -s "${USERKEY_PRIVATE_PEM_BASE}" "${USERKEY_PRIVATE_PEM_LINK}"
> -- 
> 2.7.4
> 



More information about the samba-technical mailing list