summaryrefslogtreecommitdiff
path: root/signcsr.sh
diff options
context:
space:
mode:
Diffstat (limited to 'signcsr.sh')
-rwxr-xr-xsigncsr.sh4
1 files changed, 2 insertions, 2 deletions
diff --git a/signcsr.sh b/signcsr.sh
index 910d8d9..0536411 100755
--- a/signcsr.sh
+++ b/signcsr.sh
@@ -32,7 +32,7 @@ SERIAL=$(cat "$CA"/ca/"$CA".serial)
if grep ^SPKAC "$1"; then # SPKAC HTML5 <keygen> standard
[ -n $EKU ] || EKU="clientAuth" # I don't think servers do SPKACs
openssl spkac -in "$1" # print key size
- openssl ca -config <( ./ekusub.sh "$EKU" < $OPENSSL_CONFIG ) -spkac "$1" -notext
+ openssl ca -config $OPENSSL_CONFIG -spkac "$1" -notext
else # x509 CSR
if ! [ -n "$EKU" ]; then
[[ "$( openssl req -in $1 -subject -nameopt multiline | grep -E '^ +commonName += ' | head -n 1 )" =~ ^\ +commonName\ +=\ (.+)$ ]]
@@ -48,7 +48,7 @@ else # x509 CSR
fi
fi
openssl req -in "$1" -text # print key size
- openssl ca -config <( ./ekusub.sh "$EKU" < "$OPENSSL_CONFIG" ) -in "$1" -notext
+ openssl ca -config "$OPENSSL_CONFIG" -in "$1" -notext
fi
if [ -e "$CA"/certs/"$SERIAL".pem ]; then # openssl lacks useful exit status codes, so we check to see if it actually did anything instead.