Explicitly specify serial filename to openssl (#227)

Summary:
Manually add `serial.srl` as the `CAserial` param to `openssl`. This
fixes a permissions issue when generating certificates, which fixes some
of the issues explained in #101.
Pull Request resolved: https://github.com/facebook/flipper/pull/227

Reviewed By: passy

Differential Revision: D9316089

Pulled By: jknoxville

fbshipit-source-id: dd15e2f2f318d3a1217c6b4ffd0bb7e25b56d560
This commit is contained in:
Mitch Ware
2019-02-11 04:55:47 -08:00
committed by Facebook Github Bot
parent c98047bbcf
commit 8f6138a41c

View File

@@ -28,6 +28,7 @@ const caKey = getFilePath('ca.key');
const caCert = getFilePath('ca.crt'); const caCert = getFilePath('ca.crt');
const serverKey = getFilePath('server.key'); const serverKey = getFilePath('server.key');
const serverCsr = getFilePath('server.csr'); const serverCsr = getFilePath('server.csr');
const serverSrl = getFilePath('server.srl');
const serverCert = getFilePath('server.crt'); const serverCert = getFilePath('server.crt');
// Device file paths // Device file paths
@@ -169,6 +170,7 @@ export default class CertificateProvider {
CA: caCert, CA: caCert,
CAkey: caKey, CAkey: caKey,
CAcreateserial: true, CAcreateserial: true,
CAserial: serverSrl,
}); });
}); });
} }
@@ -612,6 +614,7 @@ export default class CertificateProvider {
CA: caCert, CA: caCert,
CAkey: caKey, CAkey: caKey,
CAcreateserial: true, CAcreateserial: true,
CAserial: serverSrl,
out: serverCert, out: serverCert,
}), }),
) )