Skip to content

Conversation

TinCanTech
Copy link
Collaborator

write_global_safe_ssl_cnf_tmp() conditionally expanded the existing SSL config file, without updating $EASYRSA_SSL_CONF.

The 'global' file is no nonger required.

Replace superfluous function 'write_global_safe_ssl_cnf_tmp()'; With the intended function 'write_easyrsa_ssl_cnf_tmp()'

This conditonally 'expands' any SSL config file, currently in use, OR creates a correctly formatted SSL config file.

Required 'expansion' is conditionally set by use of LibreSSL.

Option --force-safe-ssl will expand an existing SSL config file OR force an expanded-default SSL config file.

UT Passed on OpenBSD.

write_global_safe_ssl_cnf_tmp() conditionally expanded the existing
SSL config file, without updating $EASYRSA_SSL_CONF.

The 'global' file is no nonger required.

Replace superfluous function 'write_global_safe_ssl_cnf_tmp()';
With the intended function 'write_easyrsa_ssl_cnf_tmp()'

This conditonally 'expands' any SSL config file, currently in use,
OR creates a correctly formatted SSL config file.

Required 'expansion' is conditionally set by use of LibreSSL.

Option --force-safe-ssl will expand an existing SSL config file
OR force an expanded-default SSL config file.

UT Passed on OpenBSD.

Signed-off-by: Richard T Bonhomme <[email protected]>
@TinCanTech TinCanTech self-assigned this Sep 21, 2025
@TinCanTech TinCanTech linked an issue Sep 21, 2025 that may be closed by this pull request
@TinCanTech
Copy link
Collaborator Author

Superseded-by: #1394

@TinCanTech TinCanTech closed this Sep 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OpenBSD/LibreSSL failure
1 participant