Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
What's new
10
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Open sidebar
emulab
emulab-devel
Commits
45c0d9ef
Commit
45c0d9ef
authored
Aug 28, 2014
by
Leigh B Stoller
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Use genrsa to generate key so that we can specify -des3, which
in freebsd10 is not the default.
parent
61b59b1c
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
9 additions
and
3 deletions
+9
-3
account/mksyscert.in
account/mksyscert.in
+9
-3
No files found.
account/mksyscert.in
View file @
45c0d9ef
#!/usr/bin/perl -w
#
# Copyright (c) 2000-201
2
University of Utah and the Flux Group.
# Copyright (c) 2000-201
4
University of Utah and the Flux Group.
#
# {{{EMULAB-LICENSE
#
...
...
@@ -293,9 +293,15 @@ if( defined( $oldkeyfile ) ) {
#
# Create a client side private key and certificate request.
#
my
$genopts
=
(
$encrypted
?
"
-passout 'pass:
${sh_password}
' -des3
"
:
"");
system
("
$OPENSSL
genrsa
$genopts
-out syscert_key.pem 1024
")
==
0
or
fatal
("
Could generate new key
");
system
("
$OPENSSL
req -text -new -config syscert.cnf
"
.
(
$encrypted
?
"
-pass
out
'pass:
${sh_password}
'
"
:
"
-nodes
")
.
"
-key
out
syscert_key.pem -out syscert_req.pem
$outline
")
==
0
(
$encrypted
?
"
-pass
in
'pass:
${sh_password}
'
"
:
"")
.
"
-key syscert_key.pem -out syscert_req.pem
$outline
")
==
0
or
fatal
("
Could not create certificate request
");
}
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment