From fb28fcb00019155e4726810653a3814213c636eb Mon Sep 17 00:00:00 2001
From: Alec Muffett <alec.muffett@gmail.com>
Date: Fri, 24 Jul 2020 09:06:28 +0100
Subject: [PATCH] commit: openssl config

---
 lib.d/make-selfsigned-wildcard-ssl-cert.sh | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/lib.d/make-selfsigned-wildcard-ssl-cert.sh b/lib.d/make-selfsigned-wildcard-ssl-cert.sh
index 2056562..d4ac2b2 100755
--- a/lib.d/make-selfsigned-wildcard-ssl-cert.sh
+++ b/lib.d/make-selfsigned-wildcard-ssl-cert.sh
@@ -63,10 +63,24 @@ BREW_OPENSSL=/usr/local/opt/openssl/bin/openssl
 
 if [ -f $BREW_OPENSSL ] ; then
     OPENSSL=$BREW_OPENSSL
-    OPENSSL_CONFIG=/usr/local/etc/openssl/openssl.cnf
 else
     OPENSSL=openssl
-    OPENSSL_CONFIG=/etc/ssl/openssl.cnf
+fi
+
+# order is important, first come, first served
+cnflist="
+/usr/local/etc/openssl/openssl.cnf
+/etc/ssl/openssl.cnf
+/etc/pki/tls/openssl.cnf
+"
+
+for OPENSSL_CONFIG in $cnflist "" ; do
+    test -f $OPENSSL_CONFIG && break
+done
+
+if [ "x$OPENSSL_CONFIG" = "x" ] ; then
+    echo error: cannot find OPENSSL_CONFIG amongst candidates: $cnflist
+    exit 1
 fi
 
 dn_c="AQ" # CountryName: Antarctica