From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] update.sh: Fixes bug#13138 - root/host certificate set fails to be created Date: Tue, 06 Jun 2023 12:40:50 +0200 Message-ID: <20230606104050.8290-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5295119883057551903==" List-Id: --===============5295119883057551903== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - The fix applied in vpnmain.cgi only adds the unique_subject =3D yes to the = index.txt.attr file after the first time that the root/host certificates are attempted to= be created. - Without this line in update.sh, the first attempt to create the root/host c= ertificate set will still have the original error code. If the creation is attempted agai= n then it will work because the unique_subject =3D yes will have then been added into the= file. - This patch ensures that the first attempt to create a root/host certificate= set in CU175 will work. - Confirmed on vm testbed with freshly updated CU175. Fixes: Bug#13138 Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- config/rootfiles/core/175/update.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/rootfiles/core/175/update.sh b/config/rootfiles/core/175/= update.sh index 82676bc72..f1c6873c1 100644 --- a/config/rootfiles/core/175/update.sh +++ b/config/rootfiles/core/175/update.sh @@ -191,6 +191,9 @@ if [ -s /var/ipfire/ovpn/ovpnconfig ]; then done fi =20 +## Add unique_subject =3D yes to vpn index.txt.attr file +echo "unique_subject =3D yes" > /var/ipfire/certs/index.txt.attr + # This update needs a reboot... touch /var/run/need_reboot =20 --=20 2.40.1 --===============5295119883057551903==--