From: Wilfried Teiken <wteiken@teiken.org>
Date: Sun, 3 Dec 2023 20:07:01 +0000 (-0500)
Subject: Ignore output of 'openssl req -verify'.
X-Git-Tag: v0.7.2~14
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4fd777e87e589652b1127b79ac6688ed7cb151fe;p=thirdparty%2Fdehydrated.git

Ignore output of 'openssl req -verify'.

Newer versions of openssl seem to send the verify outout to stdout instead of
stderr in the past. Ignore that output when retrieving altnames.
---

diff --git a/dehydrated b/dehydrated
index a2bff40..a15fb04 100755
--- a/dehydrated
+++ b/dehydrated
@@ -1011,7 +1011,7 @@ signed_request() {
 extract_altnames() {
   csr="${1}" # the CSR itself (not a file)
 
-  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout 2>/dev/null; then
+  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout >/dev/null 2>&1; then
     _exiterr "Certificate signing request isn't valid"
   fi