Create certificate request with stricter permissions. Reported by Luca Capello.

diff --git a/src/certtool-gaa.c b/src/certtool-gaa.c
index 14a3876f3cf8e65db40783fe98c6e9563d4a69fc..a92a69474253ecdd5ae9e3fb8fbfe55ba551bd6c 100644 (file)
--- a/src/certtool-gaa.c
+++ b/src/certtool-gaa.c
@@ -1201,7 +1201,7 @@ static int gaa_try(int gaa_num, int gaa_index, gaainfo *gaaval, char *opt_list)
        case GAAOPTID_generate_request:
        OK = 0;
 #line 30 "certtool.gaa"
-{ gaaval->action=ACTION_GENERATE_REQUEST; ;};
+{ gaaval->privkey_op=1; gaaval->action=ACTION_GENERATE_REQUEST; ;};
 
                return GAA_OK;
                break;

diff --git a/src/certtool.gaa b/src/certtool.gaa
index e979ba049f91430399f9b0a1388755594c8999bb..13141a4f62a5ebce2af4f9bd9adbf94461e79bf5 100644 (file)
--- a/src/certtool.gaa
+++ b/src/certtool.gaa
@@ -27,7 +27,7 @@ option (u, update-certificate) { $action=ACTION_UPDATE_CERTIFICATE; } "Update a
 
 option (p, generate-privkey) { $privkey_op=1; $action=ACTION_GENERATE_PRIVKEY; } "Generate a private key."
 
-option (q, generate-request) { $action=ACTION_GENERATE_REQUEST; } "Generate a PKCS #10 certificate request."
+option (q, generate-request) { $privkey_op=1; $action=ACTION_GENERATE_REQUEST; } "Generate a PKCS #10 certificate request."
 
 option (e, verify-chain) { $action=ACTION_VERIFY_CHAIN; } "Verify a PEM encoded certificate chain. The last certificate in the chain must be a self signed one."