Re: LibreSSL, openssl.cnf and using ENV to pass values

2016-07-28 Thread Mike
On 7/28/2016 10:57 AM, Theo de Raadt wrote: > > ENV support was removed entirely. > > A few people found convenient ways to use that hack. > > However, the support is baked in -- unavoidable -- and occurs in all > library use-contexts. In some of those contexts, this environment > variable su

Re: LibreSSL, openssl.cnf and using ENV to pass values

2016-07-28 Thread Theo de Raadt
> As I mentioned earlier, OpenSSL has no issues with this, but LibreSSL > picks up an error. The error is probably right in front of my eyes, but > I cannot find it. What am I doing wrong? ENV support was removed entirely. A few people found convenient ways to use that hack. However, the sup

LibreSSL, openssl.cnf and using ENV to pass values

2016-07-28 Thread Mike
First, some quick background. I wrote some scripts to help me manage a self-signing cert authority for my home network, partly to use the certs and partly to learn about TLS and such. The CA is currently running on FreeBSD (AMD64, 10.3) using OpenSSL. I have wanted to move it over to LibreSSL, s