Re: Generating SSL certificates in postinst

2010-09-13 Thread Julien Cristau
On Mon, Sep 13, 2010 at 12:25:48 +0400, Sergei Golovan wrote: > I see two ways of fixing this bug: either use -batch option which > means that the certificate will be without common name (this approach > is used in quassel), or supply an own OpenSSL config file along with > the postinst script (or

Generating SSL certificates in postinst

2010-09-13 Thread Sergei Golovan
Hi! A few days ago I've received a bug report for the prosody package which says that if an admin changes OpenSSL config file then generating a selfsigned certificate may no longer work because it requires filling a different set of fields, so simply sending 7 lines to the stdin of openssl isn't s