evolix/shellpki
21
0
Fork 0
Code Issues Pull requests Releases 3 Wiki Activity

ask for CA password before user password

Browse source
This commit is contained in:
Jérémy Lecour 2020-04-30 16:00:34 +02:00 committed by Jérémy Lecour
parent a45a130e60
commit f4e53c374a
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
shellpki
View file

@ -222,6 +222,9 @@ create() {
# check if CN already exist
[ -f "${CRTDIR}/${cn}.crt" ] && error "${cn} already used !"
# ask for CA passphrase
ask_ca_password 0
# ask for client key passphrase
if [ "${with_pass}" -eq 0 ]; then
trap 'unset PASSWORD' 0
@ -232,9 +235,6 @@ create() {
printf "\n"
fi
# ask for CA passphrase
ask_ca_password 0
# generate private key
if [ "${with_pass}" -eq 0 ]; then
PASSWORD="${PASSWORD}" "$OPENSSL" genrsa \
@ -331,7 +331,7 @@ revoke() {
[ ! -f "${CRTDIR}/${cn}.crt" ] && error "Unknow CN : ${cn}"
# check if CRT is a valid
"${OPENSSL}" x509 -noout -subject -in "${CRTDIR}/${cn}.crt" >/dev/null 2>&1 || error "${CRTDIR}/${cn}.crt is not a valid CRT, you msust delete it !"
"${OPENSSL}" x509 -noout -subject -in "${CRTDIR}/${cn}.crt" >/dev/null 2>&1 || error "${CRTDIR}/${cn}.crt is not a valid CRT, you must delete it !"
# ask for CA passphrase
ask_ca_password 0