From bc0dabd4e1a01c82d1011855caaf60a3cd6cab84 Mon Sep 17 00:00:00 2001 From: jsing <> Date: Tue, 10 Feb 2015 15:29:34 +0000 Subject: Introduce an openssl(1) certhash command. This is effectively a reimplementation of the functionality provided by the previously removed c_rehash Perl script. The c_rehash script had a number of known issues, including the fact that it needs to run openssl(1) multiple times and that it starts by removing all symlinks before putting them back, creating atomicity issues/race conditions, even when nothing has changed. certhash is self-contained and is intended to be stable - no changes should be made unless something has actually changed. This means it can be run regularly in a production environment without causing certificate lookup failures. Further testing and improvements will happen in tree. Discussed with tedu@ --- src/usr.bin/openssl/Makefile | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) (limited to 'src/usr.bin/openssl/Makefile') diff --git a/src/usr.bin/openssl/Makefile b/src/usr.bin/openssl/Makefile index 1619163a13..04a24c8c59 100644 --- a/src/usr.bin/openssl/Makefile +++ b/src/usr.bin/openssl/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.4 2014/12/03 22:16:02 bcook Exp $ +# $OpenBSD: Makefile,v 1.5 2015/02/10 15:29:34 jsing Exp $ PROG= openssl LDADD= -lssl -lcrypto @@ -17,12 +17,12 @@ CFLAGS+= -Wunused CFLAGS+= -DLIBRESSL_INTERNAL -SRCS= apps.c apps_posix.c asn1pars.c ca.c ciphers.c cms.c crl.c crl2p7.c \ - dgst.c dh.c dhparam.c dsa.c dsaparam.c ec.c ecparam.c enc.c engine.c \ - errstr.c gendh.c gendsa.c genpkey.c genrsa.c nseq.c ocsp.c openssl.c \ - passwd.c pkcs12.c pkcs7.c pkcs8.c pkey.c pkeyparam.c pkeyutl.c prime.c \ - rand.c req.c rsa.c rsautl.c s_cb.c s_client.c s_server.c s_socket.c \ - s_time.c sess_id.c smime.c speed.c spkac.c ts.c verify.c version.c \ - x509.c +SRCS= apps.c apps_posix.c asn1pars.c ca.c certhash.c ciphers.c cms.c crl.c \ + crl2p7.c dgst.c dh.c dhparam.c dsa.c dsaparam.c ec.c ecparam.c enc.c \ + engine.c errstr.c gendh.c gendsa.c genpkey.c genrsa.c nseq.c ocsp.c \ + openssl.c passwd.c pkcs12.c pkcs7.c pkcs8.c pkey.c pkeyparam.c \ + pkeyutl.c prime.c rand.c req.c rsa.c rsautl.c s_cb.c s_client.c \ + s_server.c s_socket.c s_time.c sess_id.c smime.c speed.c spkac.c ts.c \ + verify.c version.c x509.c .include -- cgit v1.2.3-55-g6feb