nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
341 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

341 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stefan Pietsch
4ee64ac3e3 Set nonRepudiation bit for email certificates 2019-05-06 23:52:55 +02:00
Stefan Pietsch
9593009221 Add x509-type for email certificates 2019-05-04 16:48:46 +02:00
Eric F Crist
5e1fc4941a neuter SC, WIP 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-04-18 06:50:57 -05:00
Eric F Crist
5024a1c1b1 Merge branch 'TinCanTech-master' 
Clean up usage of make_ssl_config

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-04-18 06:48:48 -05:00
Eric F Crist
52a399877a Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2019-04-18 06:46:19 -05:00
Eric F Crist
4de3848f0c Merge branch 'xavierba-fix_upgrade' 
Fixes for upgrade from v3.0.5 to v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-04-18 06:43:26 -05:00
Xavier Bachelot
c41bdc9b11 Simplify 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-03-22 18:15:08 +01:00
Xavier Bachelot
c1c29edf20 Don't die on missing req on revoke/renew 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-03-22 18:14:52 +01:00
Xavier Bachelot
7b9f97414d Automatically create missing renewed dirs 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-03-22 18:14:34 +01:00
Xavier Bachelot
7f96d2a680 Automatically create missing revoked dirs 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-03-22 18:14:18 +01:00
Xavier Bachelot
1a139d3620 verify_ca_init has no business checking the revoked and renewed dirs 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-03-22 18:13:52 +01:00
Eric F Crist
eb00c2ea51 Add win32 OpenSSL binaries, update build 
New build script changes to handle win32/win64 openssl binaries.
There's more to do here with copying out the README files and such, but
this should be a good working start.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-07 18:08:39 -06:00
Eric F Crist
45fd23ee69 Fix typos in openssl-easyrsa.cnf 
Merge branch 'IPv4v6-fix-typo'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-07 17:21:26 -06:00
Stefan Pietsch
7bf7afce1f Fix typo 2019-02-08 00:11:08 +01:00
Richard Bonhomme
7d46e8ff9e Prune make_ssl_config 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-06 20:05:42 +00:00
Richard Bonhomme
a5887b64bd Improve verify_ssl_lib 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-06 19:57:01 +00:00
Eric F Crist
9eb5f57112 make op_test.sh executable 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 13:35:48 -06:00
Eric F Crist
28ea02d7ed Update changelog 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 13:26:29 -06:00
Eric F Crist
f451a20a4a No uname on Windows 
Since there's no uname command on Windows, send STDERR to /dev/null.
This just prevents an error from showing on the console but doesn't
actually change any system behavior.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 13:24:35 -06:00
Eric F Crist
a42d83da05 Distribute OpenSSL 1.1.0j instead of 1.1.1a 
There are runtime issues with 1.1.1a at this time I've yet to track
down.  This is referenced in the docker-openvpn project issue 437
with a link in #261.  I've been able to reproduce it on Windows 10.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 13:21:58 -06:00
Eric F Crist
a67e13a9d9 Remove RANDFILE var from openssl-easyrsa.cnf 
This fixes #261.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 13:01:09 -06:00
Eric F Crist
6c0b6165b2 Add OpenSSL libs/binary for Windows 
Include OpenSSL libraries and binary for windows.  A precompiled package
was downloaded from http://wiki.overbyte.eu/arch/openssl-1.1.1a-win64.zip

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-04 09:58:49 -06:00
Eric F Crist
690d66be64 Update changelog 
straightening things out, back to master!

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-01 22:17:52 -06:00
Eric F Crist
4819aa56c0 OSX SSL version, lang bash for travis 
Merge branch 'TinCanTech-v3.0.6' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-02-01 08:56:19 -06:00
Eric F Crist
b8329d1b1e Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into TinCanTech-v3.0.6 2019-02-01 08:55:59 -06:00
Richard Bonhomme
c18fd74942 Travis language: bash 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-01 14:41:36 +00:00
Richard Bonhomme
40cf1d79e9 Travis: OSX SSL ver 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-01 14:32:38 +00:00
Eric F Crist
7c705f3fb2 Better date support for BSD/GNU 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-31 23:17:26 -06:00
Eric F Crist
566e7c38f6 Adding OS X testing 
Merge branch 'TinCanTech-v3.0.6' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-31 22:24:28 -06:00
Richard Bonhomme
8b6660db12 Howler! 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-01 02:14:23 +00:00
Richard Bonhomme
f3811e3021 Travis env: PATH 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-01 01:52:14 +00:00
Richard Bonhomme
6b450b7915 Add OSX to travis 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-02-01 01:23:33 +00:00
Eric F Crist
914823713a Merge branch 'luizluca-fix_build.sh' into v3.0.6 
Closes #255

* Added --no-windows, --no-unix and no --no-compress to skip some build steps.
* Use cp in a Linux and FreeBSD compatible way
* Set 'sed -i' backup extension (Linux and FreeBSD compatible)
  (Linux regression from f0204c1)
* Fix zip location to match tar (fixing also --bin-dest for win32)
* Align (y/n) with question in confirm

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-30 12:31:14 -06:00
Eric F Crist
d888dd1b23 Merge branch 'fix_build.sh' of https://github.com/luizluca/easy-rsa into luizluca-fix_build.sh 2019-01-30 12:30:46 -06:00
Luiz Angelo Daros de Luca
2a5601bad8 Multiple fix for build-dist.sh 
* Added --no-windows, --no-unix and no --no-compress to skip some
build steps.
* Use cp in a Linux and FreeBSD compatible way
* Set 'sed -i' backup extension (Linux and FreeBSD compatible)
  (Linux regression from f0204c160b3cbdc041a91f2861febab24b7f5f76)
* Fix zip location to match tar (fixing also --bin-dest for win32)
* Align (y/n) with question in confirm

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-01-30 13:59:48 -02:00
Eric F Crist
f97f9d5be7 Adding date.exe for Windows dist from UnixUtils 
Should help to address #296 with renew feature.  Briefly tested on
Windows 10 from an EasyRSA v3.0.5 release extract.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-30 09:13:09 -06:00
Richard Bonhomme
0d113a0577 Add required temp file 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 17:08:13 -06:00
Eric F Crist
92e227fa00 Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 16:27:33 -06:00
Richard Bonhomme
418bb30580 Remove unused var 2019-01-29 22:06:16 +00:00
Richard Bonhomme
8ff75ad96b Update op_test.sh usage; Add error count and custom library hook 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-29 21:54:19 +00:00
Eric F Crist
3c8c20d159 Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into v3.0.6 
Add additional tests to op_test.sh

Clsoing #292

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 14:31:06 -06:00
Eric F Crist
2543bb2db6 Removing trap left in by mistake 
In my test for fixing I left the ERR trap in place.  non-posix, removing

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:56:13 -06:00
Eric F Crist
e1f8aed886 Fixes #293 
die() wasn't calling clean_temp;  Now it is.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:32:36 -06:00
Eric F Crist
c93d8066cb Merge branch 'xavierba-renew_fixes' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-28 19:55:12 -06:00
Eric F Crist
044d2220e7 Merge branch 'renew_fixes' of https://github.com/xavierba/easy-rsa into xavierba-renew_fixes 2019-01-28 19:54:46 -06:00
Xavier Bachelot
4ccde23e07 Prevent using an empty SAN 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:43:06 +01:00
Xavier Bachelot
8b24da13fd Don't try to move inexistant files 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:50 +01:00
Xavier Bachelot
2f841e9fec Workaround older openssl which don't have -ext 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:28 +01:00
Xavier Bachelot
7966cc287a Make cert renew grace period configurable (default: 30 days) 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:01 +01:00
Xavier Bachelot
b904f0c5d3 Fix broken check for cert expiration time in renew command 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:40:40 +01:00