upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix #718: Fix unbound-control-setup with support for env

Browse source 
without HEREDOC bash support.


git-svn-id: file:///svn/unbound/trunk@3527 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2015-11-03 08:13:05 +00:00
parent bdb24c91b2
commit 92a31c1653
2 changed files with 20 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/Changelog
View file

@ -1,3 +1,7 @@
3 November 2015: Wouter
- Fix #718: Fix unbound-control-setup with support for env
without HEREDOC bash support.
29 October 2015: Wouter 29 October 2015: Wouter
- patch from Doug Hogan for SSL_OP_NO_SSLvx options. - patch from Doug Hogan for SSL_OP_NO_SSLvx options.
- Fix #716: nodata proof with empty non-terminals and wildcards. - Fix #716: nodata proof with empty non-terminals and wildcards.

34
smallapp/unbound-control-setup.sh.in
View file

@ -107,16 +107,15 @@ else
fi fi
# create self-signed cert for server # create self-signed cert for server
cat >request.cfg <<EOF echo "[req]\n" > request.cfg
[req] echo "default_bits=$BITS\n" >> request.cfg
default_bits=$BITS echo "default_md=$HASH\n" >> request.cfg
default_md=$HASH echo "prompt=no\n" >> request.cfg
prompt=no echo "distinguished_name=req_distinguished_name\n" >> request.cfg
distinguished_name=req_distinguished_name echo "\n" >> request.cfg
echo "[req_distinguished_name]\n" >> request.cfg
echo "commonName=$SERVERNAME\n" >> request.cfg
[req_distinguished_name]
commonName=$SERVERNAME
EOF
test -f request.cfg || error "could not create request.cfg" test -f request.cfg || error "could not create request.cfg"
echo "create $SVR_BASE.pem (self signed certificate)" echo "create $SVR_BASE.pem (self signed certificate)"
@ -125,16 +124,15 @@ openssl req -key $SVR_BASE.key -config request.cfg -new -x509 -days $DAYS -out
openssl x509 -in $SVR_BASE.pem -addtrust serverAuth -out $SVR_BASE"_trust.pem" openssl x509 -in $SVR_BASE.pem -addtrust serverAuth -out $SVR_BASE"_trust.pem"
# create client request and sign it, piped # create client request and sign it, piped
cat >request.cfg <<EOF echo "[req]\n" > request.cfg
[req] echo "default_bits=$BITS\n" >> request.cfg
default_bits=$BITS echo "default_md=$HASH\n" >> request.cfg
default_md=$HASH echo "prompt=no\n" >> request.cfg
prompt=no echo "distinguished_name=req_distinguished_name\n" >> request.cfg
distinguished_name=req_distinguished_name echo "\n" >> request.cfg
echo "[req_distinguished_name]\n" >> request.cfg
echo "commonName=$CLIENTNAME" >> request.cfg
[req_distinguished_name]
commonName=$CLIENTNAME
EOF
test -f request.cfg || error "could not create request.cfg" test -f request.cfg || error "could not create request.cfg"
echo "create $CTL_BASE.pem (signed client certificate)" echo "create $CTL_BASE.pem (signed client certificate)"