From 585568aa8b851d153fbec0a46769b8f12e1df7f4 Mon Sep 17 00:00:00 2001
From: "U-Z690-A\\user" <jrayhawk@omgwallhack.org>
Date: Wed, 29 Jun 2022 20:26:01 -0700
Subject: extendedKeyUsage: decommission ekusub.sh and use environment
 variables instead

ekusub.sh has additionally been generalized into inimodify.sh in case I ever need it in the future for anything else.
---
 gensignedcert.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'gensignedcert.sh')

diff --git a/gensignedcert.sh b/gensignedcert.sh
index b51f69b..a5a5368 100755
--- a/gensignedcert.sh
+++ b/gensignedcert.sh
@@ -25,7 +25,8 @@ mkdir -pv "$CA"/signed "$CA"/temp "$CA"/certs
 openssl req -config "$OPENSSL_CONFIG" -new -nodes -out "$CA"/temp/"$1".csr -keyout "$CA"/temp/"$1".key
 chmod 600 "$CA"/temp/"$1".key
 SERIAL=$(cat "$CA"/ca/"$CA".serial)
-openssl ca -config <( ./ekusub.sh "serverAuth" < "$OPENSSL_CONFIG" ) -in "$CA"/temp/"$1".csr
+EKU="serverAuth"
+openssl ca -config "$OPENSSL_CONFIG" -in "$CA"/temp/"$1".csr
 if [ -e "$CA"/certs/"$SERIAL".pem ]; then # openssl lacks useful exit status codes, so we check to see if it actually did anything instead.
   mv -i "$CA"/temp/"$1".csr "$CA"/temp/"$1".key "$CA"/signed/
   ln "$CA"/certs/"$SERIAL".pem "$CA"/signed/"$1".crt # so we can find the certificate by name as well as by serial
-- 
cgit v1.2.3