summaryrefslogtreecommitdiffstats
path: root/usr/local
diff options
context:
space:
mode:
authorErmal LUÇI <eri@pfsense.org>2015-01-12 11:49:12 +0100
committerErmal LUÇI <eri@pfsense.org>2015-01-12 11:49:12 +0100
commit6a752ca21acc099b0510d741b9774e876cfd0405 (patch)
tree2812a8bbecaf00ed70939569e522e4c1401dc30a /usr/local
parent545c4435ef6b7b747cb02229ca934ad7ec178cc4 (diff)
downloadpfsense-6a752ca21acc099b0510d741b9774e876cfd0405.zip
pfsense-6a752ca21acc099b0510d741b9774e876cfd0405.tar.gz
Put the value of password under double quotes(") to avoid issues with special characters in passwords. Ticket #4177
Diffstat (limited to 'usr/local')
-rwxr-xr-xusr/local/sbin/ovpn_auth_verify2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/sbin/ovpn_auth_verify b/usr/local/sbin/ovpn_auth_verify
index 0951e24..894c8da 100755
--- a/usr/local/sbin/ovpn_auth_verify
+++ b/usr/local/sbin/ovpn_auth_verify
@@ -4,7 +4,7 @@ if [ "$1" = "tls" ]; then
RESULT=$(/usr/local/sbin/fcgicli -f /etc/inc/openvpn.tls-verify.php -d "servercn=$2&depth=$3&certdepth=$4&certsubject=$5")
else
# Single quoting $password breaks getting the value from the variable.
- password=$(echo -n ${password} | openssl enc -base64 | sed -e 's/=/%3D/g')
+ password=$(echo -n "${password}" | openssl enc -base64 | sed -e 's/=/%3D/g')
RESULT=$(/usr/local/sbin/fcgicli -f /etc/inc/openvpn.auth-user.php -d "username=$username&password=$password&cn=$common_name&strictcn=$3&authcfg=$2&modeid=$4")
fi
OpenPOWER on IntegriCloud