diff options
| author | Peter Eisentraut | 2018-02-26 18:28:38 +0000 |
|---|---|---|
| committer | Peter Eisentraut | 2018-03-17 12:28:51 +0000 |
| commit | 8a3d9425290ff5f6434990349886afae9e1c6008 (patch) | |
| tree | 47dd8b09381f019eba35cd060d8af8f93af44c01 /src/test/ssl/Makefile | |
| parent | 7a50bb690b4837d29e715293c156cff2fc72885c (diff) | |
Add ssl_passphrase_command setting
This allows specifying an external command for prompting for or
otherwise obtaining passphrases for SSL key files. This is useful
because in many cases there is no TTY easily available during service
startup.
Also add a setting ssl_passphrase_command_supports_reload, which allows
supporting SSL configuration reload even if SSL files need passphrases.
Reviewed-by: Daniel Gustafsson <[email protected]>
Diffstat (limited to 'src/test/ssl/Makefile')
| -rw-r--r-- | src/test/ssl/Makefile | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/test/ssl/Makefile b/src/test/ssl/Makefile index 5cd2c5a404e..df477f1d401 100644 --- a/src/test/ssl/Makefile +++ b/src/test/ssl/Makefile @@ -22,6 +22,7 @@ CERTIFICATES := server_ca server-cn-and-alt-names \ root_ca SSLFILES := $(CERTIFICATES:%=ssl/%.key) $(CERTIFICATES:%=ssl/%.crt) \ + ssl/server-password.key \ ssl/client.crl ssl/server.crl ssl/root.crl \ ssl/both-cas-1.crt ssl/both-cas-2.crt \ ssl/root+server_ca.crt ssl/root+server.crl \ @@ -71,6 +72,10 @@ ssl/server-ss.crt: ssl/server-cn-only.key ssl/server-cn-only.crt server-cn-only. openssl x509 -req -days 10000 -in ssl/server-ss.csr -signkey ssl/server-cn-only.key -out ssl/server-ss.crt -extensions v3_req -extfile server-cn-only.config rm ssl/server-ss.csr +# Password-protected version of server-cn-only.key +ssl/server-password.key: ssl/server-cn-only.key + openssl rsa -des -in $< -out $@ -passout 'pass:secret1' + # Client certificate, signed by the client CA: ssl/client.crt: ssl/client.key ssl/client_ca.crt openssl req -new -key ssl/client.key -out ssl/client.csr -config client.config |