Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

set-X-pass should not use SSL option -nodes/-noenc #765

Closed
TinCanTech opened this issue Nov 11, 2022 · 1 comment · Fixed by #756
Closed

set-X-pass should not use SSL option -nodes/-noenc #765

TinCanTech opened this issue Nov 11, 2022 · 1 comment · Fixed by #756

Comments

@TinCanTech
Copy link
Collaborator

Commands:

  • set-rsa-pass uses openssl rsa
  • set-ec-pass uses openssl ec

The openssl commands rsa and ec do not support option -nodes/-noenc. Encryption status is dictated by the use of a named cipher. eg: -aes256

Using either EasyRSA set-X-pass command to remove a password (Options: --nopass and/or nopass) currently fail, with OpenSSL error:

rsa: Unrecognized flag nodes
rsa: Use -help for summary.

Code:

easy-rsa/easyrsa3/easyrsa

Lines 3088 to 3096 in 00e93d0

# Set password
out_key_tmp="$(easyrsa_mktemp)" || die "Failed to create temporary file"
easyrsa_openssl "$key_type" -in "$file" -out "$out_key_tmp" \
${cipher:+ "$cipher"} \
${EASYRSA_NO_PASS:+ "$no_password"} \
${EASYRSA_PASSIN:+ -passin "$EASYRSA_PASSIN"} \
${EASYRSA_PASSOUT:+ -passout "$EASYRSA_PASSOUT"} || die "\
Failed to change the private key passphrase. See above for possible openssl
error messages."

Fix, remove:
3092: ${EASYRSA_NO_PASS:+ "$no_password"} \

@TinCanTech
Copy link
Collaborator Author

Linking: #755 #756

@TinCanTech TinCanTech linked a pull request Nov 11, 2022 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant