starred/certbot-certbot-2
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-07-30 16:14:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Always sign certbot-auto with a yubikey (#8600)

Browse Source 
* always sign certbot-auto with the yubikey

* remove tools/offline-sigrequest.sh
This commit is contained in:
Brad Warren
2021-01-12 13:45:26 -08:00
committed by GitHub
parent 7a02deeeba
commit b9de48e93e
2 changed files with 4 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/_release.sh
+4 -12
View File
@@ -216,18 +216,10 @@ fi
# ensure we have the latest built version of leauto
letsencrypt-auto-source/build.py
# Now we have to sign the built version of leauto. If
# RELEASE_OPENSSL_WITH_YUBIKEY is set, try to use the yubikey to sign
# letsencrypt-auto, otherwise, use tools/offline-sigrequest.sh.
if [ -n "$RELEASE_OPENSSL_WITH_YUBIKEY" ]; then
SignLEAuto() {
yubico-piv-tool -a verify-pin --sign -s 9c -i letsencrypt-auto-source/letsencrypt-auto -o letsencrypt-auto-source/letsencrypt-auto.sig
}
else
SignLEAuto() {
tools/offline-sigrequest.sh
}
fi
# Now we have to sign the built version of leauto.
SignLEAuto() {
yubico-piv-tool -a verify-pin --sign -s 9c -i letsencrypt-auto-source/letsencrypt-auto -o letsencrypt-auto-source/letsencrypt-auto.sig
}
# Loop until letsencrypt-auto is signed correctly.
SignLEAuto || true