Attachment 9021 Details for Bug 44469 – Patch for make-certificate.sh

[patch] Patch for make-certificate.sh

make-certificate.sh.patch (text/plain), 1.17 KB, created by Timo Denissen on 2017-07-12 14:21:08 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Timo Denissen

Created: 2017-07-12 14:21:08 CEST

Size: 1.17 KB

patch

obsolete

>--- /usr/share/univention-ssl/make-certificates.sh.orig 2017-07-12 14:04:48.000000000 +0200
>+++ /usr/share/univention-ssl/make-certificates.sh      2017-07-12 14:04:52.000000000 +0200
>@@ -413,6 +413,8 @@
>        local name="${1:?Missing argument: dirname}"
>        local fqdn="${2:?Missing argument: common name}"
>        local days="${3:-$DEFAULT_DAYS}"
>+       local domain=$(ucr get domainname)
>+       local san=$(univention-ldapsearch -LLL cNAMERecord=$fqdn. | grep relativeDomainName: | awk -v domain="${domain}" '{print $2, $2"."domain}' | sed ':a;N;$!ba;s/\n/\ /g')
> 
>        local hostname="${fqdn%%.*}" cn="$fqdn"
>        if [ ${#hostname} -gt 64 ]
>@@ -436,7 +438,7 @@
>                [ -n "$EXTERNAL_REQUEST_FILE_KEY" ] && cp "$EXTERNAL_REQUEST_FILE_KEY" "$name/private.key"
>        else
>                # generate a key pair
>-               mk_config "$name/openssl.cnf" "" "$days" "$cn" "$fqdn $hostname"
>+               mk_config "$name/openssl.cnf" "" "$days" "$cn" "$fqdn $hostname $san"
>                openssl genrsa -out "$name/private.key" "$DEFAULT_BITS"
>                openssl req -batch -config "$name/openssl.cnf" -new -key "$name/private.key" -out "$name/req.pem"
>        fi

Actions: View | Diff

Attachments on bug 44469: 9021