Difference between revisions of "Fnrancid"

From Initech Technical Wiki
Jump to: navigation, search
(Created page with "<pre> --- fnrancid 2015-05-31 06:16:40.000000000 +1200 +++ fnrancid.patched 2016-09-21 07:47:51.969827661 +1200 @@ -210,6 +210,21 @@ # remove occurrances of conf_file_ver...")
 
 
Line 1: Line 1:
 +
This patch makes fnrancid ignore the block of config which contains regularly rolling private keys.  This is required as of rancid version 3.1
 +
 
<pre>
 
<pre>
 
--- fnrancid 2015-05-31 06:16:40.000000000 +1200
 
--- fnrancid 2015-05-31 06:16:40.000000000 +1200

Latest revision as of 19:58, 20 September 2016

This patch makes fnrancid ignore the block of config which contains regularly rolling private keys. This is required as of rancid version 3.1

--- fnrancid	2015-05-31 06:16:40.000000000 +1200
+++ fnrancid.patched	2016-09-21 07:47:51.969827661 +1200
@@ -210,6 +210,21 @@
 	# remove occurrances of conf_file_ver
 	next if (/^#?conf_file_ver=/);
 
+        # filter cycling encrypted private keys
+        if (/^\s*set private-key "-----BEGIN ENCRYPTED PRIVATE KEY-----/) {
+            ProcessHistory("","","","#$_");
+            ProcessHistory("","","","# <removed>");
+            while (<INPUT>) {
+                tr/\015//d;
+                last if (/$prompt/);
+
+                if (/^\s*-----END ENCRYPTED PRIVATE KEY-----"/) {
+                    ProcessHistory("","","","#$_");
+                    last;
+                }
+            }
+        }
+
 	# filter cycling RSA private keys
 	if (/^\s*set private-key "-----BEGIN RSA PRIVATE KEY-----/) {
 	    ProcessHistory("","","","#$_");