From 6165ccec6ce4cacd263bc7b18e7e1c9d2e585ebe Mon Sep 17 00:00:00 2001
From: Jeremy Dubois <jdubois@evolix.fr>
Date: Thu, 14 Apr 2022 15:51:07 +0200
Subject: [PATCH] Generate CRL only if (re)generating CA

---
 shellpki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shellpki b/shellpki
index ed7584e..42611ec 100755
--- a/shellpki
+++ b/shellpki
@@ -332,13 +332,13 @@ EOF
         if [ "$?" -ne 0 ]; then
             error "Error generating the CA certificate"
         fi
-    fi
     
         "${OPENSSL_BIN}" ca \
             -config "${CONF_FILE}" \
             -passin pass:${CA_PASSWORD} \
             -gencrl \
             -out "${CRL}"
+    fi
 }
 
 ocsp() {