AWS AmazonRDS documentation change
Summary
Condensed shell script syntax by removing line breaks in certificate rotation example
Security assessment
Changes are purely code formatting improvements in the example script (combining multi-line commands into single lines). No security vulnerabilities are mentioned or addressed. The content remains focused on standard SSL certificate rotation procedures without introducing new security features or mitigations.
Diff
diff --git a/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.md b/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.md index c8c81e13f..3423388a7 100644 --- a//AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.md +++ b//AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.md @@ -248,4 +248 @@ The following is a sample shell script that imports the certificate bundle into - fi - - truststore=${mydir}/rds-truststore.jks - storepassword=changeit + fi truststore=${mydir}/rds-truststore.jks storepassword=changeit @@ -256,2 +253 @@ The following is a sample shell script that imports the certificate bundle into - for CERT in rds-ca-*; do - alias=$(openssl x509 -noout -text -in $CERT | perl -ne 'next unless /Subject:/; s/.*(CN=|CN = )//; print') + for CERT in rds-ca-*; do alias=$(openssl x509 -noout -text -in $CERT | perl -ne 'next unless /Subject:/; s/.*(CN=|CN = )//; print') @@ -268,2 +264 @@ The following is a sample shell script that imports the certificate bundle into - do - expiry=`keytool -list -v -keystore "$truststore" -storepass ${storepassword} -alias "${alias}" | grep Valid | perl -ne 'if(/until: (.*?)\n/) { print "$1\n"; }'` + do expiry=`keytool -list -v -keystore "$truststore" -storepass ${storepassword} -alias "${alias}" | grep Valid | perl -ne 'if(/until: (.*?)\n/) { print "$1\n"; }'` @@ -284,4 +279 @@ The following is a sample shell script that imports the certificate bundle into - fi - - truststore=${mydir}/rds-truststore.jks - storepassword=changeit + fi truststore=${mydir}/rds-truststore.jks storepassword=changeit @@ -292,2 +284 @@ The following is a sample shell script that imports the certificate bundle into - for CERT in rds-ca-*; do - alias=$(openssl x509 -noout -text -in $CERT | perl -ne 'next unless /Subject:/; s/.*(CN=|CN = )//; print') + for CERT in rds-ca-*; do alias=$(openssl x509 -noout -text -in $CERT | perl -ne 'next unless /Subject:/; s/.*(CN=|CN = )//; print') @@ -304,2 +295 @@ The following is a sample shell script that imports the certificate bundle into - do - expiry=`keytool -list -v -keystore "$truststore" -storepass ${storepassword} -alias "${alias}" | grep Valid | perl -ne 'if(/until: (.*?)\n/) { print "$1\n"; }'` + do expiry=`keytool -list -v -keystore "$truststore" -storepass ${storepassword} -alias "${alias}" | grep Valid | perl -ne 'if(/until: (.*?)\n/) { print "$1\n"; }'`