Skip to content

Commit

Permalink
revoke: Pass the correct certificate location to revoke function
Browse files Browse the repository at this point in the history
Certificates moved to the 'pki/expired' directory do not require
mirroring the PKI directory structure, one directory is adequate.

Certificates moved to the 'pki/renewed' directory do require
mirroring the PKI directory structure. This is inherited bahavior.

Set the correct mirrrored directory for target certificates in the
'renewed' directory structure.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
  • Loading branch information
TinCanTech committed Jul 23, 2024
1 parent f0b22c4 commit 24d5514
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions easyrsa3/easyrsa
Original file line number Diff line number Diff line change
Expand Up @@ -3171,7 +3171,7 @@ issued certificate:${NL}
# Revoking an issued cert forces req/key to be moved
move_req_and_key=1
;;
expired|renewed)
expired|renewed/issued)
# Revoke-expired/renewed cert means req/key can remain
move_req_and_key=
;;
Expand Down Expand Up @@ -5861,7 +5861,7 @@ case "$cmd" in
;;
revoke-renewed)
verify_working_env
cert_dir=renewed
cert_dir=renewed/issued
revoke "$@"
;;
renew)
Expand Down

0 comments on commit 24d5514

Please sign in to comment.