X-Git-Url: https://iankelling.org/git/?p=vpn-setup;a=blobdiff_plain;f=vpn-mk-client-cert;h=440cfe919049d2d1389cbedda3d9a8fe49c3a9e8;hp=46d9dbadba45ab80227986cec3b11422c9338324;hb=HEAD;hpb=d85c0e0fbcb0ce109bb59e4dc8f0cedece24c468

diff --git a/vpn-mk-client-cert b/vpn-mk-client-cert
index 46d9dba..7bad544 100755
--- a/vpn-mk-client-cert
+++ b/vpn-mk-client-cert
@@ -1,5 +1,12 @@
 #!/bin/bash
-# Copyright (C) 2016 Ian Kelling
+# I, Ian Kelling, follow the GNU license recommendations at
+# https://www.gnu.org/licenses/license-recommendations.en.html. They
+# recommend that small programs, < 300 lines, be licensed under the
+# Apache License 2.0. This file contains or is part of one or more small
+# programs. If a small program grows beyond 300 lines, I plan to switch
+# its license to GPL.
+
+# Copyright 2024 Ian Kelling
 
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -13,6 +20,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+
 set -eE -o pipefail
 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
 
@@ -40,7 +48,7 @@ usage: ${0##*/} VPN_SERVER_HOST
 -f               Force. Proceed even if cert already exists.
 -n CONFIG_NAME   default is client
 -o SERVER_CONFIG_NAME  Default is CONFIG_NAME
--r               Install certs to the current directory instead of /etc/openvpn
+-r               Install certs to the current directory instead of /etc/openvpn/client
 -s SCRIPT_PATH   Use custom up/down script at SCRIPT_PATH. If client host is
                  not localhost, the script is copied to it. The default
                  script used to be /etc/openvpn/update-resolv-conf, but now
@@ -140,8 +148,8 @@ if ! $force; then
     fi
     if $prefix test -s $keydir/ta-$name.key -a -s $keydir/ca-$name.crt; then
       echo "$0: cert already exists. exiting early"
+      exit 0
     fi
-    exit 0
   fi
 fi