From 4800cbb2100e2e8d7ed64dbfe81f8af043de8e83 Mon Sep 17 00:00:00 2001 From: Gunnar Beutner Date: Tue, 8 Jul 2014 09:05:07 +0200 Subject: [PATCH] Check if openssl call failed fixes #6622 --- pki/icinga2-sign-key.cmake | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pki/icinga2-sign-key.cmake b/pki/icinga2-sign-key.cmake index f3aa5c6f2..a57a6fa8b 100644 --- a/pki/icinga2-sign-key.cmake +++ b/pki/icinga2-sign-key.cmake @@ -26,7 +26,10 @@ fi [ -f $ICINGA_CA/vars ] && . $ICINGA_CA/vars -openssl x509 -days "$REQ_DAYS" -CA $ICINGA_CA/ca.crt -CAkey $ICINGA_CA/ca.key -req -in $ICINGA_CA/$csrfile -outform PEM -out $ICINGA_CA/$pubkfile.crt -CAserial $ICINGA_CA/serial +if ! openssl x509 -days "$REQ_DAYS" -CA $ICINGA_CA/ca.crt -CAkey $ICINGA_CA/ca.key -req -in $ICINGA_CA/$csrfile -outform PEM -out $ICINGA_CA/$pubkfile.crt -CAserial $ICINGA_CA/serial; then + echo "Signing the CSR failed." >&2 + exit 1 +fi cn=`openssl x509 -in $pubkfile.crt -subject | grep -Eo '/CN=[^ ]+' | cut -f2- -d=` -- 2.40.0