nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,518 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

1518 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Richard T Bonhomme
2dd2767922
build-ca: Deliberately remove manual password in temp-file 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 23:11:43 +00:00
Richard T Bonhomme
41f23444c6
Merge branch 'TinCanTech-set_var-v2' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:54:57 +00:00
Richard T Bonhomme
9d21db8629
Merge branch 'set_var-v2' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-set_var-v2 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:54:04 +00:00
Richard T Bonhomme
3d1f2135bb
Merge branch 'TinCanTech-cleanup-stty-echo' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:43:25 +00:00
Richard T Bonhomme
8510681747
Merge branch 'cleanup-stty-echo' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-cleanup-stty-echo 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:42:07 +00:00
Richard T Bonhomme
a23232144c
Merge branch 'TinCanTech-easyrsa_mktemp-v2' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:28:13 +00:00
Richard T Bonhomme
1dc5c265ac
Merge branch 'easyrsa_mktemp-v2' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-easyrsa_mktemp-v2 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 21:27:32 +00:00
Richard T Bonhomme
35dd0d919c
Remove unused variable EASYRSA_EC_DIR 
This was used to define a temp-dir for a temp-file for EC params.

This was replaced by standard temp-file EASYRSA_ALGO_PARAMS.

The replacement was due to EasyRSA support for OpenSSL version 3,
where SSL command 'genpkey' replaced the previous commands.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-11 02:51:24 +00:00
Richard T Bonhomme
66d282e1c1
set-var(): Check input, die on errors 
Previously, set_var() had no input checking, combined with
the point that, via vars, set_var() is user facing, this
can lead to easy user errors.

Now, input is checked:
- Parameter 1 is required.
- Parameter 1 cannot contain a space.
- Less-than 3 input parameters are expected.
- Quote the expansion of the first occurence of parameter 1
  in the evaluated expression.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-09 20:47:15 +00:00
Richard T Bonhomme
d4a1caa394
Rename variable EASYRSA_TEMP_DIR_session to secured_session 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-09 01:21:55 +00:00
Richard T Bonhomme
9a4b98246b
secure_session(): Wrap long lines 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-09 00:41:45 +00:00
Richard T Bonhomme
f762627e2d
easyrsa_mktemp(): Drop redundant test of temp-session existence 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-09 00:21:35 +00:00
Richard T Bonhomme
043448503f
easyrsa_mktemp(): Correct logic for file creation 
Each try is now aimed at creating a unique target file.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-09 00:20:28 +00:00
Richard T Bonhomme
fd8dcfdafe
Merge branch 'TinCanTech-verify-ssl-before-temp-session' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-08 23:11:26 +00:00
Richard T Bonhomme
393a094aa4
Merge branch 'verify-ssl-before-temp-session' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-verify-ssl-before-temp-session 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-08 23:10:28 +00:00
Richard T Bonhomme
8de04a1439
Move verify_ssl_lib() - Always verify SSL lib, for all commands 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-08 23:05:33 +00:00
Richard T Bonhomme
e70c6363e6
cleanup(): Only enable terminal echo when it has been disabled 
Only build-ca with a manually entered password disables terminal echo.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-08 18:04:14 +00:00
Richard T Bonhomme
b52f6cbd8b
easyrsa_mktemp(): Pre-assign empty value to temp-file name 
Satisfy shellcheck SC2154, var is referenced but not assigned.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-07 23:32:48 +00:00
Richard T Bonhomme
fba0cf1986
easyrsa_mktemp(): Use sequentially numbered temp-files 
This drops use of SSL to generate randomly numbered files.
The temp-session is still randomly named.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-07 19:49:24 +00:00
Richard T Bonhomme
ab264130c1
ChangeLog: Option --fix-offset: Adjust off-by-one day 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 21:14:01 +00:00
Richard T Bonhomme
11e66f3dfb
Merge branch 'TinCanTech-remove-debug' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:54:12 +00:00
Richard T Bonhomme
c2b20731d5
Merge branch 'remove-debug' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-remove-debug 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:53:14 +00:00
Richard T Bonhomme
b8d0c789e5
Merge branch 'TinCanTech-remove-extra-output-lines' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:49:39 +00:00
Richard T Bonhomme
4ad288ef5b
Merge branch 'remove-extra-output-lines' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-remove-extra-output-lines 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:49:05 +00:00
Richard T Bonhomme
043ee3e4c0
Merge branch 'TinCanTech-general-fixes' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:47:15 +00:00
Richard T Bonhomme
4e0135acd6
Merge branch 'general-fixes' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-general-fixes 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 19:45:31 +00:00
Richard T Bonhomme
84f6a3775c
init-pki soft: Add crl.pem to file delete list 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 14:47:31 +00:00
Richard T Bonhomme
0d404360c5
show-ca: Remove undefined '$type' variable from output 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 14:33:45 +00:00
Richard T Bonhomme
d1063e0ad0
Remove redundant separator lines 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 00:55:36 +00:00
Richard T Bonhomme
3b5ff50bf7
Remove ineffectual redirector 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-04 00:43:40 +00:00
Richard T Bonhomme
4ed1277ba1
Merge branch 'TinCanTech-move-show_host' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 23:55:35 +00:00
Richard T Bonhomme
b7f46a1482
Merge branch 'move-show_host' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-move-show_host 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 23:55:01 +00:00
Richard T Bonhomme
d5c28f6ec2
Move calling show_host() to function die(), where it belongs 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 23:51:06 +00:00
Richard T Bonhomme
3175b0118e
Merge branch 'TinCanTech-wrap-sed' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 23:26:26 +00:00
Richard T Bonhomme
a6b6c31f67
Merge branch 'wrap-sed' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-wrap-sed 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 23:25:17 +00:00
Richard T Bonhomme
1f80065917
Remove debug symbols 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-03 00:02:50 +00:00
Richard T Bonhomme
50174317bc
Wrap long lines: easyrsa_openssl(), sed command 
Move the sed command to a function and wrap long lines.
New function: easyrsa_rewrite_ssl_config()

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-02-02 20:56:26 +00:00
Richard T Bonhomme
005ae7f072
Merge branch 'TinCanTech-aesthetics-build-ca-create-dirs-files' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-26 19:40:19 +00:00
Richard T Bonhomme
9a46aefc3c
Merge branch 'aesthetics-build-ca-create-dirs-files' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-aesthetics-build-ca-create-dirs-files 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-26 19:39:36 +00:00
Richard T Bonhomme
90abca60f0
Merge branch 'TinCanTech-force_set_var' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-26 19:35:33 +00:00
Richard T Bonhomme
20c854ba58
Merge branch 'force_set_var' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-force_set_var 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-26 19:34:51 +00:00
Richard T Bonhomme
9047c95850
build-ca: Minor code reformat (aesthetics) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-26 00:37:26 +00:00
Richard T Bonhomme
9a8bf39b75
Rename safe_set_var() to force_set_var() 
force_set_var() is intended to deliberately over-write all prior values.

This also drops an unnecessary 'eval'.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-25 03:53:20 +00:00
Richard T Bonhomme
420c30a98c
Merge branch 'TinCanTech-remove-unit-test-password' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-24 20:07:01 +00:00
Richard T Bonhomme
1639180272
Merge branch 'remove-unit-test-password' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-remove-unit-test-password 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-24 20:06:10 +00:00
Richard T Bonhomme
81ab139ebb
Remove hard-coded unit-test password from build-ca 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-24 16:05:02 +00:00
Richard T Bonhomme
6fe973a548
Merge branch 'TinCanTech-update-ca-attributes' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-22 19:55:36 +00:00
Richard T Bonhomme
915d52c598
Merge branch 'update-ca-attributes' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-update-ca-attributes 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-22 19:54:49 +00:00
Richard T Bonhomme
c4eeff9201
build-ca: Write 'unique_subject = no' to index.txt.attr file 
EasyRSA version 3.1x 'renew' command requires this attribute.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-22 19:20:24 +00:00
Richard T Bonhomme
81842810ef
Merge branch 'TinCanTech-wrap-build-ca' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2023-01-22 19:12:44 +00:00