diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index cc501fb..de0d23f 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -5642,7 +5642,10 @@ select_vars() { fi # Default PKI; if vars exists, use it ONLY - if [ -e "$PWD/pki/vars" ]; then + if [ -e "$PWD/pki/vars" ] && \ + [ -z "$EASYRSA_PKI" ] && \ + [ -z "$EASYRSA" ] + then # Prevent vars from changing expected PKI. # A vars in the PKI MUST always imply EASYRSA_PKI # This is NOT backward compatible