ronivay / XenOrchestraInstallerUpdater

Xen Orchestra install/update script
GNU General Public License v3.0
1.18k stars 189 forks source link

Update to xo-install.sh to allow use of ECC/ECDSA certificates #90

Closed a-mugica closed 3 years ago

a-mugica commented 3 years ago

the CheckCertificate function fails when using ECC certificates this change updates the openssl commands that compare certificate and key to ones that are algorithm-generic so that both RSA and ECC (and others?) can be compared and used. based on answers here: https://security.stackexchange.com/questions/73127/how-can-you-check-if-a-private-key-and-certificate-match-in-openssl-with-ecdsa and the other linked question: https://security.stackexchange.com/questions/56697/determine-if-private-key-belongs-to-certificate

ronivay commented 3 years ago

Nice, thank you.