Oh, there were *two* places where we needed to protect the file

name...

diff --git a/tools/c_rehash.in b/tools/c_rehash.in
index c2e7d67f3bcab3bc0b6040d77d1fcad8f6583221..c480dff3ad56768049890412071e43529043721e 100644 (file)
--- a/tools/c_rehash.in
+++ b/tools/c_rehash.in
@@ -131,7 +131,8 @@ sub link_hash_cert {
 
 sub link_hash_crl {
                my $fname = $_[0];
-               my ($hash, $fprint) = `$openssl crl -hash -fingerprint -noout -in "$fname"`;
+               $fname =~ s/'/'\\''/g;
+               my ($hash, $fprint) = `$openssl crl -hash -fingerprint -noout -in '$fname'`;
                chomp $hash;
                chomp $fprint;
                $fprint =~ s/^.*=//;