HACK: Hack create_ca.sh for libressl

LibreSSL 3.7.x doesn't have 'openssl x509 -force_pubkey'.
tpm2-software · Apr 14, 2023 · 0d5fd80 · 0d5fd80
1 parent bdc3485
commit 0d5fd80
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/script/ekca/create_ca.sh b/script/ekca/create_ca.sh
@@ -160,7 +160,7 @@ openssl req -new -nodes -newkey rsa:2048 -passin file:pass.txt -out ../intermed-
 pushd ../intermed-ca
 export OPENSSL_CONF=./intermed-ca.cnf
 
-openssl x509 -req -in certreqs/nonsense.csr.pem -force_pubkey certreqs/ek.pub.pem -out certs/ek.cert.der \
+openssl x509 -req -in certreqs/nonsense.csr.pem -out certs/ek.cert.der \
     -outform DER -extfile ../ek/ek.cnf -extensions ek_ext -set_serial 12345 \
     -CA intermed-ca.cert.pem -CAkey private/intermed-ca.key.pem -passin file:pass.txt
 
@@ -195,7 +195,7 @@ openssl req -new -nodes -newkey rsa:2048 -passin file:pass.txt -out ../intermed-
 pushd ../intermed-ca
 export OPENSSL_CONF=./intermed-ca.cnf
 
-openssl x509 -req -in certreqs/nonsense.csr.pem -force_pubkey certreqs/ekecc.pub.pem -out certs/ekecc.cert.der \
+openssl x509 -req -in certreqs/nonsense.csr.pem -out certs/ekecc.cert.der \
     -outform DER -extfile ../ek/ek.cnf -extensions ek_ext -set_serial 12345 \
     -CA intermed-ca.cert.pem -CAkey private/intermed-ca.key.pem -passin file:pass.txt