40 Commits

Author SHA1 Message Date
Junichi Uekawa
14e26c7473
Stylistic updates to documentation.
Add markdown links to documents referred to in README.md and
doc/EasyRSA-Readme.md

Signed-off-by: Junichi Uekawa <dancer@debian.org>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2023-08-03 00:06:31 +01:00
Richard T Bonhomme
95af4f0a30
Documentation updates (No functional changes)
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-10-12 23:47:11 +01:00
Richard T Bonhomme
6472160152
Doc: Correct version requirements (Replace 3.1.2+ with 3.1.1+)
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-10-09 19:46:53 +01:00
Richard T Bonhomme
9cda05613c
Doc: EasyRSA-Contributing.md - Update
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-10-08 18:17:31 +01:00
Richard T Bonhomme
fc39a6b425
doc: Add EasyRSA-Contributing.md
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-10-07 15:15:09 +01:00
Richard T Bonhomme
17ded6f52e
Doc-Update: Note that all changes were included with Easy-RSA v3.1.1
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-09-21 21:49:19 +01:00
Richard T Bonhomme
b44035c225
Documentation: Add EasyRSA-Renew-and-Revoke.md
Document the various EasyRSA version differences of renewal and revocation.

Closes: #626

Authors comment:
It has taken good luck, hard work and co-operation to save
EasyRSA "renewal and revocation".

I am pleased to have provided the solution presented here.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-09-15 20:27:55 +01:00
Richard T Bonhomme
fe3cced16c
Option --req-cn: Restore original behavior from v30x series
Due to my previous misunderstanding of the intended use of --req-cn,
it is no longer possible to set commonName for command gen-req.
Ref: #524  #456

This commit restores v30x series behavior:
* --req-cn can only be used in batch mode.
* --req-cn can only be used by commands build-ca and gen-req.
* SSL layer prompts are restored to original behavior.

Important: The use of internal batch mode is no longer required
for command sign_req(), when called by build_full(). This code
has been disabled but remains in place.  This is a considerable
change under the hood but there is no user observable difference.

Also, minor improvements to help and EasyRSA-Advanced.md

Tested manually and thoroughly.

Closes: #668

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-09-08 11:42:56 +01:00
Richard T Bonhomme
2ab7205131
Squashed commit - doc: Add 'ed' option to EASYRSA_ALGO
commit 37232a8a6677dcdd5be4b4f9d3f1c8241e214a49
Merge: bee93cf a3c9f0b
Author: Richard T Bonhomme <tincantech@protonmail.com>
Date:   Fri Aug 5 18:05:56 2022 +0100

    Merge branch 'doc-add-ed' of ssh://github.com/mnme/easy-rsa into mnme-doc-add-ed

    Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>

commit a3c9f0bb5b79fa9fffaaf65b109069035138788b
Author: Nicolas Jeker <n.jeker@gmx.net>
Date:   Thu Aug 20 11:31:32 2020 +0200

    doc: Add 'ed' option to EASYRSA_ALGO

    Related to #488

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-08-05 18:08:02 +01:00
Richard T Bonhomme
111fb7c330
Merge branch 'patch-3' of github.com/noah-de/easy-rsa
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-22 13:47:40 +00:00
Richard T Bonhomme
5ece7ccb3d
Merge branch 'feature/custom-umask'
github.com/ccin2p3/easy-rsa into ccin2p3-feature/custom-umask

Fix typo: 'defúlts' -> 'default'

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-22 12:58:07 +00:00
Richard T Bonhomme
d0c8f30b66 Merge branch 'master' of github.com/a1346054/easy-rsa into a1346054-master 2022-03-22 12:00:10 +00:00
Richard T Bonhomme
6b7eedb5e4
Merge PR #423 with a minor white space correction
Errant space after OpenVPN on line 2

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-22 02:49:43 +00:00
Richard T Bonhomme
a30c3b6871
EasyRSA-Readme.md: Add serverClient certificate type
Closes: #497

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-22 02:08:26 +00:00
Richard T Bonhomme
c2a302eeac
Update EasyRSA-Advanced.md: Correct command line option --keysize
Closes: #198

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-21 22:40:54 +00:00
Richard T Bonhomme
b02f4231a5
Re-arrange "# Signing a request" to fix markdown problem
Supercedes: #430
Closes: #47

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-21 19:28:59 +00:00
Steven Pousty
3e009e3d7a
small typo fix
Just found a single letter typo
2021-11-01 20:48:25 -07:00
a1346054
212c18a83c
Trim excess whitespace 2021-10-21 14:21:00 +00:00
Fᴀʙɪᴇɴ Wᴇʀɴʟɪ
1f7ef3663f
Add possibility to configure umask 2021-10-12 10:21:35 +02:00
Noah Spahn
90071cc753
Update EasyRSA-Readme.md
A few more readability corrections/suggestions
2021-01-03 21:17:59 -08:00
Eric F Crist
8ad3cd845c
Add note in EasyRSA-Advanced about setting advanced options.
Merge branch 'master' of https://github.com/visuve/easy-rsa into visuve-master

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2020-09-09 15:42:56 -05:00
Nicolas Jeker
3d23b1bd01 doc: Spelling, formatting and setence structure improvements 2020-08-20 11:35:14 +02:00
visuve
c7980daaa4 Add a note in EasyRSA-Advanced.md
- The global options need to be set before the actual commands
- https://github.com/OpenVPN/easy-rsa/blob/master/easyrsa3/easyrsa#L219
2020-06-28 16:33:45 +03:00
Peter Schiffer
f4b4308f16
Expose EASYRSA_PASSIN and EASYRSA_PASSOUT env variables
By exposing these variables it's possible to configure the password from
various sources by specifing env vars. This is a followup to PR #242

Fixes #365
2020-03-26 23:09:28 +01:00
Olliver Schinagl
e21ed159a1
Use intermediate CA rather then sub CA
The term 'sub-ca' seems to be coined and used mostly/only by easyrsa.
More commonly, this type of certificate is called an intermediate CA
[0]. The term sub-ca, while logical is actually a Microsoft CA term [1].

The command itself remains the same for now, as it is shorter/easier to
type.

[0] https://en.wikipedia.org/w/index.php?title=Intermediate_certificate_authorities
[1] https://en.wikipedia.org/wiki/Public_key_infrastructure

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
2019-05-17 10:31:26 +02:00
Olliver Schinagl
7f2936caf9
doc: Add signing example to the readme.
While it is documented in the quickstart, it was missing from the
readme, which is confusing as all other commands are shown with an
example in the document.

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
2019-05-17 10:15:46 +02:00
Eric F Crist
e8cd6c9807 Rename config to openssl-easyrsa.cnf
This clarifies the use of the file as specific to EasyRSA while also
closing the loop on the openssl version chase.  No reason to have a
configuration file that is specific to openssl version at this point.
If the need arises, we'll do so in a sane fashion.

Resolves #159

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2017-11-04 08:06:48 -05:00
Olav Reinert
d20d2b3c06 Update docs and examples to fit changes in 534f673 2017-07-27 08:27:27 +02:00
Olav Reinert
534f673459 Make $PWD/pki the default PKI location 2017-06-05 23:41:14 +02:00
Drew Anderson
b93d0a1675 spelling fixes and setence structure improvements 2016-05-09 10:24:02 +10:00
Eric F Crist
ed597da0fc Prepare for v3.0.0 release
* Update ChangeLog to reflect minor last-minute commits.
* Modify build-dist.sh to create both zip and tgz files
* Add notable changes to Upgrade-Notes
2015-09-02 19:53:04 -05:00
Josh Cepek
1551e5f335 docs: fix typo 2014-07-27 08:02:43 -05:00
Josh Cepek
49d7c102ec Improve docs: add Upgrade-Notes; add online support refs
Upgrade-Notes includes v2 to v3 upgrade changes that users should be
aware of.

The updated top-level README helps point users to online support
locations.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-12-23 12:35:40 -06:00
Josh Cepek
f74d08eace docs: update Hacking.md with layout & git conventions
Updates include listing project dir layout, git conventions on
commits/merges/tags, and code spacing/indent recommendations.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-12-12 08:33:49 -06:00
Josh Cepek
c86289ba17 Fix batch-mode handling with changes in e75ad75
The --batch CLI arg now takes no options and enables batch-mode when
present.

init-pki no longer takes a 'force' value which did the same as --batch.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-12-11 11:29:51 -06:00
Josh Cepek
7fd95438bc Add Hacking docs
Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-30 18:43:48 -06:00
Josh Cepek
cb74c35eb3 Update to ECDSA support from commit 45c27e9
Add documentation & help output; add quoting; add error messages; put
the ecparams dir under PKI dir with env-var tunable.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-24 23:37:27 -06:00
Josh Cepek
b0494ab243 Add initial 3.x codebase files
This is the initial re-write for the 3.x release series.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-18 02:54:07 -06:00
Josh Cepek
346adba3f3 Remove all 2.x files prior to 3.x codebase drop
This cleans out the directory tree for the 3.x codebase re-write.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-18 02:44:31 -06:00
Alon Bar-Lev
4886d517e5 build: doc
Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2012-06-27 07:07:38 -05:00