From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] vpnmain.cgi: unique_subject = yes in index.txt.attr for first attempt with fresh install Date: Thu, 15 Jun 2023 21:55:01 +0200 Message-ID: <20230615195501.11141-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3419921552105237867==" List-Id: --===============3419921552105237867== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - The patches for Bug#13138 https://patchwork.ipfire.org/project/ipfire/patch/20230603140541.13834-1-a= dolf.belka(a)ipfire.org/ https://patchwork.ipfire.org/project/ipfire/patch/20230606104050.8290-1-ad= olf.belka(a)ipfire.org/ work for an update to Core Update 175 but a fresh install of CU175 will st= ill fail with the error when creating the root/host certificate set for the first time. - This patch ensures that the unique_subject =3D yes line is addeed to index.= txt.attr when the root/host certificate set is attempted to be created or is upload= ed also for the first attempt. Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- html/cgi-bin/vpnmain.cgi | 2 ++ 1 file changed, 2 insertions(+) diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi index f2aeecdf9..63f875c6a 100644 --- a/html/cgi-bin/vpnmain.cgi +++ b/html/cgi-bin/vpnmain.cgi @@ -870,6 +870,8 @@ END } elsif ($cgiparams{'ACTION'} eq $Lang::tr{'generate root/host certificates'= } || $cgiparams{'ACTION'} eq $Lang::tr{'upload p12 file'}) { =20 + &newcleanssldatabase(); + if (-f "${General::swroot}/ca/cacert.pem") { $errormessage =3D $Lang::tr{'valid root certificate already exists'}; goto ROOTCERT_SKIP; --=20 2.41.0 --===============3419921552105237867==--