mirrors/openssl
0
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-16 21:43:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

Make 'openssl req -x509' more equivalent to 'openssl req -new'

Browse Source 
The following would fail, or rather, freeze:

    openssl genrsa -out rsa2048.pem 2048
    openssl req -x509 -key rsa2048.pem -keyform PEM -out cert.pem

In that case, the second command wants to read a certificate request
from stdin, because -x509 wasn't fully flagged as being for creating
something new.  This changes makes it fully flagged.

RT#4655

Reviewed-by: Andy Polyakov <appro@openssl.org>
This commit is contained in:
Richard Levitte 2016-08-22 14:53:53 +02:00
parent 3ba1ef829c
commit 599e5904b2
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
apps/req.c
View File

@ -289,6 +289,7 @@ int req_main(int argc, char **argv)
break;
case OPT_X509:
x509 = 1;
newreq = 1;
break;
case OPT_DAYS:
days = atoi(opt_arg());
@ -578,7 +579,7 @@ int req_main(int argc, char **argv)
}
}
if (newreq || x509) {
if (newreq) {
if (pkey == NULL) {
BIO_printf(bio_err, "you need to specify a private key\n");
goto end;