nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
683 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

683 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Eric F Crist
3e93f925d3
Add version output option and info 
Now supports both --version and "version and outputs detailed version
information.  Tested on FreeBSD, macOS, and Windows 10 64-bit.

Sample Output:

EasyRSA Version Information
Version:     git-development
Generated:   Tue Apr 14 18:54:42 CDT 2020
SSL Lib:     OpenSSL 1.1.1a-freebsd  20 Nov 2018
Git Commit:  f0129cfe6222820a85db2d394ab73d3c7759c5be
Source Repo: https://github.com/OpenVPN/easy-rsa

This closes #372

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-04-14 19:10:07 -05:00
Eric F Crist
f0129cfe62
Correct formatting issue in vars.example 
Closes #370

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-31 09:01:07 -05:00
Eric F Crist
945c9359f6
Update changelog for release v3.0.7 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-30 18:51:33 -05:00
Eric F Crist
8af5466b7c
Add support for RID in SAN 
Merge branch 'ccin2p3-feature/OID'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-28 20:57:31 -05:00
Eric F Crist
667eb4e4b3
Merge branch 'feature/OID' of https://github.com/ccin2p3/easy-rsa 2020-03-28 20:57:12 -05:00
Eric F Crist
e7169b6d90
Update changelog for #362 - RID in SAN 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-28 20:55:25 -05:00
Eric F Crist
b543c7095d
Add support for RID (RegisteredID) to SAN 
Merge branch 'feature/OID' of https://github.com/ccin2p3/easy-rsa into ccin2p3-feature/OID

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-28 20:51:28 -05:00
Eric F Crist
fc1ad59fbb
Update changelog to add note for passin/out env vars 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-28 20:46:00 -05:00
Eric F Crist
949931811f
Expose EASYRSA_PASSIN and EASYRSA_PASSOUT 
Also adds a check to prevent it from being present in the config file.
This still needs a unit test long term.  Closes #365.

Merge branch 'pschiffe-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-28 20:41:38 -05:00
Peter Schiffer
f390dbebc1
Check for EASYRSA_PASSIN and EASYRSA_PASSOUT vars in config file 
and refuse to continue if they are present there, as they might containg
passwords.
 2020-03-26 23:51:02 +01:00
Peter Schiffer
f4b4308f16
Expose EASYRSA_PASSIN and EASYRSA_PASSOUT env variables 
By exposing these variables it's possible to configure the password from
various sources by specifing env vars. This is a followup to PR #242

Fixes #365
 2020-03-26 23:09:28 +01:00
Eric F Crist
8f07331ab8
Update changelog 
Adding support for Edwards Curves

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-24 18:10:08 -05:00
Eric F Crist
56fada79d0
Add support for Edwards Curves 
Closes #354 and #350

Merge branch 'siddharths2710-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-24 18:04:35 -05:00
Eric F Crist
2bca44ce61
Merge branch 'master' of https://github.com/siddharths2710/easy-rsa into siddharths2710-master 2020-03-24 18:04:17 -05:00
Sid Srinivas
7ef2302044 Provided support for ED curves 2020-03-17 07:59:46 +05:30
Eric F Crist
8c54f192e0
Changed link in README to use https 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-03-16 08:12:38 -05:00
Fᴀʙɪᴇɴ Wᴇʀɴʟɪ
72a9173df7 Add support for Object Identifier in Subject Alternative Names 
See http://openssl.cs.utah.edu/docs/apps/x509v3_config.html:

> The subject alternative name extension allows various literal values
> to be included in the configuration file. These include email (an email
> address) URI a uniform resource indicator, DNS (a DNS domain name), RID
> (a registered ID: OBJECT IDENTIFIER), IP (an IP address), dirName (a
> distinguished name) and otherName.
 2020-03-12 09:04:58 +01:00
Randolf Richardson
d4588cfd89
Update README.md 
Changed link to POSIX standard from HTTP to HTTPS.
 2020-03-02 21:47:24 -08:00
root
c45298e804 Bug fixes and code formatting for ed curves 2020-02-01 11:03:48 +01:00
root
2c72a7a231 Hardcoded checks for ED curves manually 2020-01-20 15:39:48 +01:00
root
48da132a89 Removed stray quotes 2020-01-19 08:16:26 +01:00
root
da6f658770 Removed stray ED echo 2020-01-19 08:08:09 +01:00
root
ce858f56c5 Added ED curve support 2020-01-19 07:54:24 +01:00
Eric F Crist
e59911a474
Add support for named pipe for ca.key 
Closes #347

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 17:55:57 -06:00
Eric F Crist
5cbf4498aa
Merge branch 'master' of https://github.com/jvsalo/easy-rsa into jvsalo-master 2020-01-11 17:55:39 -06:00
Eric F Crist
ae7e293759
Generate a useful error if config doesn't exits 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 16:10:54 -06:00
Eric F Crist
5eec79de29
Merge branch 'master' of https://github.com/rolfchess/easy-rsa into rolfchess-master 2020-01-11 16:10:31 -06:00
Eric F Crist
1b3d0cb172
Update Changelog 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 16:10:22 -06:00
Eric F Crist
ad49dcff1f
Add support for KDC certificates 
Closes #322

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 16:03:04 -06:00
Eric F Crist
c4942d9abe
Merge branch 'kdc' of https://github.com/xavierba/easy-rsa into xavierba-kdc 2020-01-11 16:02:24 -06:00
Eric F Crist
a52aab9638
Update docs, clarify some language. 
Closes #310

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 15:56:20 -06:00
Eric F Crist
597d6c0272
Merge branch 'docs' of https://github.com/oliv3r/easy-rsa into oliv3r-docs 2020-01-11 15:55:47 -06:00
Eric F Crist
b2bebf95b6
Update Changelog to mention upgrade script 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 15:41:46 -06:00
Eric F Crist
d91486b4f4
Upgrade script bug fixes 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-11 15:40:59 -06:00
Eric F Crist
3be7fe6807
Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2020-01-11 15:38:52 -06:00
Richard Bonhomme
7ccec6e7bc
Add easyrsa-unit-tests to gitignore 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2020-01-11 03:14:04 +00:00
Richard Bonhomme
ef2fc88cf0
Exit function with correct code 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2020-01-11 00:36:51 +00:00
Richard Bonhomme
8cd88a14bb
Inline credentials 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2020-01-10 23:17:30 +00:00
Richard Bonhomme
d28b2edfb0
Ignore serial.old 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2020-01-10 17:08:13 +00:00
Eric F Crist
7e741a5a11
Add upgrade path for EasyRSA 
Merge branch 'TinCanTech-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-09 09:02:13 -06:00
Richard Bonhomme
07ec923be1
Easyrsa PKI upgrade 
Automate upgrading PKI from v2 to v307+
Automate upgrading CA from pre v306 to v307+

Info:
https://community.openvpn.net/openvpn/wiki/easyrsa-upgrade

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2020-01-08 16:26:33 +00:00
Eric F Crist
573e3346ea
Merge branch 'TinCanTech-master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2020-01-07 12:04:01 -06:00
Jaakko Salo
b7dbefcd56 Allow ca.key to be a pipe 
Non-interactive use of Easy-RSA requires ca.key to be available
unencrypted, because the password prompt is interactive.

Allow ca.key to be a pipe that could be created eg. with 'mkfifo -m 600'
prior to invoking Easy-RSA.
 2020-01-04 16:53:10 +02:00
Richard Bonhomme
00a083e7fc
Correct parameter to easyrsa_openssl in vars_setup 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-12-13 12:12:22 +00:00
Eric F Crist
7f727b791b
Default cert expire down to 825 days 
* resolves #52

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-11-25 19:17:46 -06:00
Eric F Crist
f00ab0f85b
Merge branch 'a1346054-master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-11-25 17:34:41 -06:00
a1346054
c6dd7ff1f6
Fix typo 2019-11-24 15:41:39 +00:00
a1346054
bd4135b453
Spelling 2019-11-24 15:25:37 +00:00
Eric F Crist
8e862614fa
Failed to add the new op_test.sh script 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 08:15:04 -05:00
Eric F Crist
1190152c9b
move unit tests to easyrsa-unit-test repo 
This modifies the op_test.sh script to pull a working copy of the actual
unit tests from the easyrsa-unit-test repo.  This allows us to update
the unit test script outside the easy-rsa repo.

A current limitation of the way we've integrated TravisCI is that the
repo and tests go hand-in-hand.  This means that if a test is broken or
otherwise needs an update, it has to come with the PR itself.  There's
never a point of re-running a TravisCI test, since the test is part of
that repo.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 08:11:22 -05:00