balena-io / open-balena

Open source software to manage connected IoT devices at scale
https://balena.io/open
GNU Affero General Public License v3.0
1.04k stars 164 forks source link

Quickstart script prompting for PEM password when using OpenSSL 3 #169

Closed florianluediger closed 3 months ago

florianluediger commented 1 year ago

Due to an issue in the easy-rsa tool, the nopass option specified in gen-root-ca#L30 does not work anymore and OpenSSL asks for a PEM password.

Link to the original issue

Example:

~/open-balena/scripts/quickstart -c -U your@username.here -P password -d domain
[INFO] ACME Certificate request is ENABLED.
==> Creating new configuration at: /home/balena/open-balena/config
==> Bootstrapping easy-rsa...
  - Downloading easy-rsa...
==> Generating root CA cert...
/home/balena/open-balena/config/certs/root/ca.crt
/tmp/easyrsa.O0o87l0S/easyrsa
Enter PEM pass phrase: