Re: Avoid system(3) in ikectl

[Ted Unangst]

Theo de Raadt wrote:
> Isn't something like better -- to avoid marshalling code to convert
> arguments -> array?

this requires mixing declarations and code, but all our compilers are c99
compliant now, and this does make ca_system simpler.

> 
>   char *pkcs_args[] =
>       PATH_OPENSSL,
>       "pkcs12",
>       "-export",
>       "-caname",
>       ca->caname,
>       "-name",
>       ca->caname,
>       "-cacerts",
>       "-nokeys",
>       "-in",
>       cacrt,
>       "-out",
>       capfx,
>       "-passout",
>       "env:EXPASS",
>       "-passin",
>       ca->passfile,
>       NULL
>   };
> 
>   ca_system(pkcs_args);
>