From 599e5904b22f3d50c5f4720aa3bc8ab8af0ffa98 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Mon, 22 Aug 2016 14:53:53 +0200 Subject: Make 'openssl req -x509' more equivalent to 'openssl req -new' The following would fail, or rather, freeze: openssl genrsa -out rsa2048.pem 2048 openssl req -x509 -key rsa2048.pem -keyform PEM -out cert.pem In that case, the second command wants to read a certificate request from stdin, because -x509 wasn't fully flagged as being for creating something new. This changes makes it fully flagged. RT#4655 Reviewed-by: Andy Polyakov --- apps/req.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'apps') diff --git a/apps/req.c b/apps/req.c index bd18708e3a..2666124546 100644 --- a/apps/req.c +++ b/apps/req.c @@ -289,6 +289,7 @@ int req_main(int argc, char **argv) break; case OPT_X509: x509 = 1; + newreq = 1; break; case OPT_DAYS: days = atoi(opt_arg()); @@ -578,7 +579,7 @@ int req_main(int argc, char **argv) } } - if (newreq || x509) { + if (newreq) { if (pkey == NULL) { BIO_printf(bio_err, "you need to specify a private key\n"); goto end; -- cgit v1.2.3