easyrsa_openssl(): Create a safe SSL config once per instance ONLY #931
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
TinCanTech
added
Full-Approval
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
TinCanTech
force-pushed
the
single-use-safe-ssl-conf
branch
from
507889c
to
867333d
Compare
|
Failure is because Linux and Windows MacOS does not. Only effects status reports. |
If the certificate does not exist then the database date is used. The database date is a shortened ISO-8601 date, the certifcate date is presented in a completely different format. Omit the calculated "seconds since epoch" double check via 'date', when the certificate does not exist. Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
|
As a test, if the first safe-SSL config file is deleted after setting |
Status reports function read_db() MUST recreate the secure session for each record of the database being read. Introduce remove_secure_session(), to remove the session and reset related flags: - secure_session: The directory name of the session. Deleted. - working_safe_ssl_conf - Safe SSL config file. Deleted. - mktemp_counter - Count of temp files. Deleted. Also use remove_secure_session() in cleanup(). Improve some verbose output. Wrap some long lines. Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.