artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 41d3ead) | patch
Set "unique_subject = no" to allow renewing expired certificates.
authortobhe <tobhe@openbsd.org>
Fri, 17 Nov 2023 14:43:36 +0000 (14:43 +0000)
committertobhe <tobhe@openbsd.org>
Fri, 17 Nov 2023 14:43:36 +0000 (14:43 +0000)
commit255ae5e81cb9ce16785805bcef7f80d7ce2eb68f
treeee5fc572e0efde82af748eafc12bf9b92185259atree | snapshot
parent41d3eadea57cafbb06cc4d8f2ec4594ac68c342acommit | diff
Set "unique_subject = no" to allow renewing expired certificates.
Without this, openssl throws an error when creating a second req for
the same subject which leads to ikectl deleting the old cert without
creating a new one.

Reported by Ryan Kavanagh in openiked-portable here:
https://github.com/openiked/openiked-portable/issues/125

discussed with tb@
ok patrick@
usr.sbin/ikectl/ikeca.cnf diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim