Generate CRL only if (re)generating CA

This commit is contained in:
Jérémy Dubois 2022-04-14 15:51:07 +02:00
parent 55e02c6a13
commit 6165ccec6c

View file

@ -332,13 +332,13 @@ EOF
if [ "$?" -ne 0 ]; then if [ "$?" -ne 0 ]; then
error "Error generating the CA certificate" error "Error generating the CA certificate"
fi fi
fi
"${OPENSSL_BIN}" ca \ "${OPENSSL_BIN}" ca \
-config "${CONF_FILE}" \ -config "${CONF_FILE}" \
-passin pass:${CA_PASSWORD} \ -passin pass:${CA_PASSWORD} \
-gencrl \ -gencrl \
-out "${CRL}" -out "${CRL}"
fi
} }
ocsp() { ocsp() {