mirror of https://github.com/hak5/openwrt.git
uhttpd: prefer px5g for certificate creation
Prefer the old default 'px5g' for certificate creation as Firefox seems to dislike OpenSSL-created certs. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>lede-17.01
parent
89817614bb
commit
82132540a3
|
@ -44,10 +44,10 @@ generate_keys() {
|
|||
config_get location "$cfg" location
|
||||
config_get commonname "$cfg" commonname
|
||||
|
||||
# Prefer OpenSSL for certificate generation (existence evaluated last)
|
||||
# Prefer px5g for certificate generation (existence evaluated last)
|
||||
local GENKEY_CMD=""
|
||||
[ -x "$PX5G_BIN" ] && GENKEY_CMD="$PX5G_BIN selfsigned -der"
|
||||
[ -x "$OPENSSL_BIN" ] && GENKEY_CMD="$OPENSSL_BIN req -x509 -outform der -nodes"
|
||||
[ -x "$PX5G_BIN" ] && GENKEY_CMD="$PX5G_BIN selfsigned -der"
|
||||
[ -n "$GENKEY_CMD" ] && {
|
||||
$GENKEY_CMD \
|
||||
-days ${days:-730} -newkey rsa:${bits:-2048} -keyout "${UHTTPD_KEY}.new" -out "${UHTTPD_CERT}.new" \
|
||||
|
|
Loading…
Reference in New Issue