From 32cd473392d20b70bf6f1272a873f47a71a9417b Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@openssl.org>
Date: Sat, 7 Oct 2017 14:59:18 -0400
Subject: [PATCH] Anchor the regexp match

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4483)
---
 apps/CA.pl.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/CA.pl.in b/apps/CA.pl.in
index b5c4f59446..6306fa47d5 100644
--- a/apps/CA.pl.in
+++ b/apps/CA.pl.in
@@ -127,7 +127,7 @@ if ($WHAT eq '-newcert' ) {
     # create a pre-certificate
     $RET = run("$REQ -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS");
     print "Pre-cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
-} elsif ($WHAT =~ /\-newreq(\-nodes)?/ ) {
+} elsif ($WHAT =~ /^\-newreq(\-nodes)?$/ ) {
     # create a certificate request
     $RET = run("$REQ -new $1 -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}");
     print "Request is in $NEWREQ, private key is in $NEWKEY\n" if $RET == 0;
-- 
2.25.1