273 Commits

Author SHA1 Message Date
Richard Bonhomme
04888672d4 Improve testing
Limitations, see: https://github.com/OpenVPN/easy-rsa/issues/282

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-25 07:14:29 -06:00
Eric F Crist
1583934bec Update ChangeLog in prep for v3.0.6 release
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 20:17:06 -06:00
Eric F Crist
3e869c0c1c Set shellcheck servity to warning+
Added the -S warning option to the shellcheck call to make informational
and style suggestions not throw errors in travis.  These types of things
can be picked up in code review.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 16:15:47 -06:00
Eric F Crist
51344196ca Add some shellcheck exclusions.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 16:15:04 -06:00
Eric F Crist
dc85de818e Merge branch 'keros-move_revoked_files' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 15:48:31 -06:00
Eric F Crist
7603334b0f Use -n instead of ! -z in test
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 15:46:58 -06:00
Eric F Crist
f39330f6cb Unquote $opt for revoke as it may be empty
In testing for #63 I discovered that there is at least one instance of a
quoted $opts for the revoke command that causes openssl to throw errors.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 15:43:31 -06:00
Eric F Crist
fc804ac1c3 Merge branch 'move_revoked_files' of https://github.com/keros/easy-rsa into keros-move_revoked_files
Minor merge conflict changes:
* remove local scoping
* PR was based on master, this is being merged in v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-16 15:35:03 -06:00
Eric F Crist
5ca20af032 Missed the merge conflict.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-11 12:02:52 -06:00
Eric F Crist
7c58e47a69 Support for clientServer
Merging PR #38

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-11 11:58:00 -06:00
Eric F Crist
6ef40c0e39 Scope environment overrides to EASYRSA
Merge branch 'javier-godoy-feature/sed' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-11 10:22:08 -06:00
Eric F Crist
998d4f3366 Merge branch 'feature/sed' of https://github.com/javier-godoy/easy-rsa into javier-godoy-feature/sed 2019-01-11 10:21:40 -06:00
Eric F Crist
5961077953 Support for revokation reason.
Merge branch 'javier-godoy-feature/crl_reason' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-11 10:13:04 -06:00
Eric F Crist
a11ecd959e Merge branch 'feature/crl_reason' of https://github.com/javier-godoy/easy-rsa into javier-godoy-feature/crl_reason 2019-01-11 10:12:04 -06:00
Eric F Crist
128d5744a2 Merge branch 'TinCanTech-v3.0.6' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-01-11 09:59:38 -06:00
Richard Bonhomme
54eb9dc8e6 Move verifying the SSL lib to verify_ssl_lib() and only call after verify_pki_init()
Signed-off-by: Richard Bonhomme <25598447+TinCanTech@users.noreply.github.com>
2019-01-04 00:43:08 +00:00
Richard Bonhomme
fb6fd5465a Use EASYRSA specific temp file for output to set_pass
Signed-off-by: Richard Bonhomme <25598447+TinCanTech@users.noreply.github.com>
2019-01-01 18:07:17 +00:00
Javier Godoy
24182ff27e Double quote to prevent globbing and word splitting 2018-12-22 06:05:00 -03:00
Javier Godoy
07641547e4 Add optional CRL reason parameter 2018-12-16 18:18:28 -03:00
Javier Godoy
f173fb9c38 Preserve other environment variables 2018-12-16 18:03:58 -03:00
Richard Bonhomme
331038f5eb Merge pull request #1 from TinCanTech/TinCanTech-password-echo
Fix password echo
2018-12-16 18:17:26 +00:00
Richard Bonhomme
f32df2f932 Fix password echo 2018-12-16 18:16:48 +00:00
Eric F Crist
1abc1405dd Merge branch 'TinCanTech-TinCanTech-sed-backtick' into v3.0.6
Resolves #267

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-12 08:59:43 -06:00
Richard Bonhomme
a99623dfcb Use escape backtick for sed separator
Signed-off-by: Richard Bonhomme <25598447+TinCanTech@users.noreply.github.com>
2018-12-12 14:17:23 +00:00
Eric F Crist
a860ea791a test suite fixes
* need the script to actually do more functional testing
* need to be able to test input, need something automated

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:39:21 -06:00
Eric F Crist
5bc2de6bbf SC1147, remove local call
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:21:03 -06:00
Eric F Crist
9db151e388 Update op_test to support show-cert, add'l cmds
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:15:21 -06:00
Eric F Crist
7cb2840cd7 Merge branch 'solidgoldbomb-add-show-ca-command' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:07:17 -06:00
Eric F Crist
b21d9bd780 Mergeing from solidgoldbomg for #118
Merge branch 'add-show-ca-command' of
   https://github.com/solidgoldbomb/easy-rsa
   into solidgoldbomb-add-show-ca-command
2018-12-11 20:04:05 -06:00
Eric F Crist
fc8f3512d3 More Travis-CI corrections.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 19:39:08 -06:00
Eric F Crist
e01401d618 Shellcheck corrections
Make some corrections to appease shellcheck now that travis is working

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 18:18:31 -06:00
Eric F Crist
c73a06349f Update Travis-CI config to something that works?
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 17:56:30 -06:00
Stacey Sheldon
9dc040a42f easyrsa: add show-ca command to display the ca certificate 2018-12-07 20:08:52 -05:00
Eric F Crist
fdd5db9995 Merge branch 'luizluca-fix_default_expire'
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-04 17:43:28 -05:00
Luiz Angelo Daros de Luca
ac8bccec2c update EASYRSA_CERT_EXPIRE new default value
Improves 376c62f2b81e36db6f449ac7673013075b0c3ef1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-04 18:08:43 -03:00
Eric F Crist
39bbfe2228 Merge branch 'luizluca-fix_initpki_openssl_path'
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-03 17:20:26 -05:00
Luiz Angelo Daros de Luca
13a2bf45d4 respect EASYRSA_SSL_CONF during init-pki
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-03 18:09:43 -03:00
Eric F Crist
ceffdf63e4 trap sig exit, too
The clean_temp() function failed to be called on a clean exit due to the
previous change (446a58f).  Also adding in the bit from die() that I
failed to remember to push in.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 17:06:36 -05:00
Eric F Crist
aa1894ba26 Merge branch 'TinCanTech-v3.0.6' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 13:39:40 -05:00
Eric F Crist
ca7a95142f Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into TinCanTech-v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 13:39:09 -05:00
Richard Bonhomme
f17bcc9013 Improve hide_read_pass function
Follow example from prog_exit function
2018-10-02 18:52:05 +01:00
Eric F Crist
bcf1e43483 Missed file from 446a58f
I somehow missed adding this change, even though the file was part of
the commit.  git is hard.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:39:37 -05:00
Eric F Crist
7122f514c1 Fix minor build-dist.sh issues
* Use ~KEY~ pattern for replacement instead of ~~~, which doesn't scale.
* Include an empty string following -i for sed.  This prevents the extra
files from showing up with -e.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:34:50 -05:00
Eric F Crist
3792c9eafd Broaden trap() functionality
Resolves #236 and #247

* Broaden trapped signals to SIGHUB, SIGINT, SIGQUIT, SIGABRT
* Turn echo back on upon exit.
* Provide a newline at exit just to make the terminal look pretty.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:02:40 -05:00
Richard Bonhomme
c1a6e3c4cd Improve hide_read_pass function 2018-09-29 13:57:05 +01:00
Eric F Crist
d43bd5f9d9 Update README to point to new #easyrsa on Freenode.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-25 09:47:34 -05:00
Eric F Crist
cca3abbf4e Merge branch 'TinCanTech-v3.0.6' into v3.0.6
Fix for echo issue on Windows for password prompts.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-24 20:17:44 -05:00
Richard Bonhomme
02a8986a82 Correct path to sh.exe 2018-09-25 01:10:15 +01:00
Richard Bonhomme
162b8a278c Function to hide password input 2018-09-24 23:42:26 +01:00
Eric F Crist
f6d8a9903b Chicken/Egg config writing fixed
Only write out the default config to EASYRSA_PKI during init-pki
function call.  Assume it's there or error out when appropriate.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-15 10:43:49 -05:00