lib/func.tcl: Stupid long-standing typo in `sync-profiles'.

[ca] / lib / func.tcl

diff --git a/lib/func.tcl b/lib/func.tcl
index 04bd206..9e03b5b 100644 (file)
--- a/lib/func.tcl
+++ b/lib/func.tcl
@@ -326,7 +326,7 @@ proc next-matching-date* {pat refvar i} {
       {^\d+$} {
        ## A numeric literal.  If it's within bounds then set it; otherwise
        ## we'll have to start from the beginning.
-       if {$p < $n || $p > $max} { return step }
+       if {$p < $nn || $p > $max} { return step }
        set nn $p
       }
 
@@ -425,7 +425,7 @@ proc sync-profiles {} {
          UPDATE profile SET
                  extensions = $d(extensions),
                  issue_time = $d(issue-time),
-                 start_skew = $(start-skew),
+                 start_skew = $d(start-skew),
                  expire_interval = $d(expire-interval),
                  tombstone = 0
          WHERE label = $p;
@@ -448,10 +448,10 @@ proc sync-profiles {} {
 proc req-key-hash {file} {
   ## Return the key hash from the certificate request in FILE.
 
-  return [exec \
+  return [lindex [exec \
              openssl req -in $file -noout -pubkey | \
              openssl rsa 2>/dev/null -pubin -outform der | \
-             openssl dgst -sha256 -hex]
+             openssl dgst -sha256 -hex] end]
 }
 
 proc req-dn {file} {
@@ -466,10 +466,10 @@ proc req-dn {file} {
 proc cert-key-hash {file} {
   ## Return the key hash from the certificate in FILE.
 
-  return [exec \
+  return [lindex [exec \
              openssl x509 -in $file -noout -pubkey | \
              openssl rsa 2>/dev/null -pubin -outform der | \
-             openssl dgst -sha256 -hex]
+             openssl dgst -sha256 -hex] end]
 }
 
 proc cert-dn {file} {