mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

When retrieving a public key for a certificate, private key, or signing request, write the certificate data out to a temp file instead of echoing it through a pipe. Fixes #8153

Browse Source
This commit is contained in:
jim-p 2017-12-01 12:41:56 -05:00
parent 9038f44c7e
commit b6dcbd646f
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/etc/inc/certs.inc
View File

@ -603,20 +603,23 @@ function cert_get_publickey($str_crt, $decode = true, $type = "crt") {
if ($decode) {
$str_crt = base64_decode($str_crt);
}
$certfn = tempnam('/tmp', 'CGPK');
file_put_contents($certfn, $str_crt);
switch ($type) {
case 'prv':
exec("echo \"{$str_crt}\" | openssl pkey -pubout", $out);
exec("/usr/bin/openssl pkey -in {$certfn} -pubout", $out);
break;
case 'crt':
exec("echo \"{$str_crt}\" | openssl x509 -inform pem -noout -pubkey", $out);
exec("/usr/bin/openssl x509 -in {$certfn} -inform pem -noout -pubkey", $out);
break;
case 'csr':
exec("echo \"{$str_crt}\" | openssl req -inform pem -noout -pubkey", $out);
exec("/usr/bin/openssl req -in {$certfn} -inform pem -noout -pubkey", $out);
break;
default:
$out = array();
break;
}
unlink($certfn);
return implode("\n", $out);
}