diff options
| author | jsing <> | 2015-02-10 15:29:34 +0000 |
|---|---|---|
| committer | jsing <> | 2015-02-10 15:29:34 +0000 |
| commit | b2c538142cfc76f91bea09b3f7c963c7a5265659 (patch) | |
| tree | 9f2c13f7bedc8d66ebe176e93c7aa04db8707df3 /src/lib/libcrypto/engine/eng_ctrl.c | |
| parent | b5dcc59b2cf1dad7e9ebcc08266a1bf71c384886 (diff) | |
| download | openbsd-b2c538142cfc76f91bea09b3f7c963c7a5265659.tar.gz openbsd-b2c538142cfc76f91bea09b3f7c963c7a5265659.tar.bz2 openbsd-b2c538142cfc76f91bea09b3f7c963c7a5265659.zip | |
Introduce an openssl(1) certhash command.
This is effectively a reimplementation of the functionality provided by
the previously removed c_rehash Perl script. The c_rehash script had a
number of known issues, including the fact that it needs to run openssl(1)
multiple times and that it starts by removing all symlinks before
putting them back, creating atomicity issues/race conditions, even when
nothing has changed.
certhash is self-contained and is intended to be stable - no changes
should be made unless something has actually changed. This means it can
be run regularly in a production environment without causing certificate
lookup failures.
Further testing and improvements will happen in tree.
Discussed with tedu@
Diffstat (limited to 'src/lib/libcrypto/engine/eng_ctrl.c')
0 files changed, 0 insertions, 0 deletions