From 8f6138a41cedb10cec64b0d31c5acf5a9cd7aed0 Mon Sep 17 00:00:00 2001 From: Mitch Ware Date: Mon, 11 Feb 2019 04:55:47 -0800 Subject: [PATCH] Explicitly specify serial filename to openssl (#227) Summary: Manually add `serial.srl` as the `CAserial` param to `openssl`. This fixes a permissions issue when generating certificates, which fixes some of the issues explained in #101. Pull Request resolved: https://github.com/facebook/flipper/pull/227 Reviewed By: passy Differential Revision: D9316089 Pulled By: jknoxville fbshipit-source-id: dd15e2f2f318d3a1217c6b4ffd0bb7e25b56d560 --- src/utils/CertificateProvider.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/utils/CertificateProvider.js b/src/utils/CertificateProvider.js index 64ba47c7d..b5945b836 100644 --- a/src/utils/CertificateProvider.js +++ b/src/utils/CertificateProvider.js @@ -28,6 +28,7 @@ const caKey = getFilePath('ca.key'); const caCert = getFilePath('ca.crt'); const serverKey = getFilePath('server.key'); const serverCsr = getFilePath('server.csr'); +const serverSrl = getFilePath('server.srl'); const serverCert = getFilePath('server.crt'); // Device file paths @@ -169,6 +170,7 @@ export default class CertificateProvider { CA: caCert, CAkey: caKey, CAcreateserial: true, + CAserial: serverSrl, }); }); } @@ -612,6 +614,7 @@ export default class CertificateProvider { CA: caCert, CAkey: caKey, CAcreateserial: true, + CAserial: serverSrl, out: serverCert, }), )