110 Commits

Author SHA1 Message Date
Eric F Crist
b21d9bd780 Mergeing from solidgoldbomg for #118
Merge branch 'add-show-ca-command' of
   https://github.com/solidgoldbomb/easy-rsa
   into solidgoldbomb-add-show-ca-command
2018-12-11 20:04:05 -06:00
Eric F Crist
e01401d618 Shellcheck corrections
Make some corrections to appease shellcheck now that travis is working

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 18:18:31 -06:00
Stacey Sheldon
9dc040a42f easyrsa: add show-ca command to display the ca certificate 2018-12-07 20:08:52 -05:00
Luiz Angelo Daros de Luca
ac8bccec2c update EASYRSA_CERT_EXPIRE new default value
Improves 376c62f2b81e36db6f449ac7673013075b0c3ef1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-04 18:08:43 -03:00
Luiz Angelo Daros de Luca
13a2bf45d4 respect EASYRSA_SSL_CONF during init-pki
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-03 18:09:43 -03:00
Eric F Crist
ceffdf63e4 trap sig exit, too
The clean_temp() function failed to be called on a clean exit due to the
previous change (446a58f).  Also adding in the bit from die() that I
failed to remember to push in.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 17:06:36 -05:00
Eric F Crist
ca7a95142f Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into TinCanTech-v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 13:39:09 -05:00
Richard Bonhomme
f17bcc9013 Improve hide_read_pass function
Follow example from prog_exit function
2018-10-02 18:52:05 +01:00
Eric F Crist
7122f514c1 Fix minor build-dist.sh issues
* Use ~KEY~ pattern for replacement instead of ~~~, which doesn't scale.
* Include an empty string following -i for sed.  This prevents the extra
files from showing up with -e.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:34:50 -05:00
Eric F Crist
3792c9eafd Broaden trap() functionality
Resolves #236 and #247

* Broaden trapped signals to SIGHUB, SIGINT, SIGQUIT, SIGABRT
* Turn echo back on upon exit.
* Provide a newline at exit just to make the terminal look pretty.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:02:40 -05:00
Richard Bonhomme
c1a6e3c4cd Improve hide_read_pass function 2018-09-29 13:57:05 +01:00
Richard Bonhomme
02a8986a82 Correct path to sh.exe 2018-09-25 01:10:15 +01:00
Richard Bonhomme
162b8a278c Function to hide password input 2018-09-24 23:42:26 +01:00
Eric F Crist
f6d8a9903b Chicken/Egg config writing fixed
Only write out the default config to EASYRSA_PKI during init-pki
function call.  Assume it's there or error out when appropriate.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-15 10:43:49 -05:00
Eric F Crist
bb9b0b7543 Merge branch 'v3.0.5' of https://github.com/OpenVPN/easy-rsa into v3.0.6 2018-09-14 23:42:28 -05:00
Eric F Crist
7e80326044 Merge btamayo change.
Closes #214 in master

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 22:42:57 -05:00
Eric F Crist
1f8017087d Merge branch 'btamayo-patch-1' into v3.0.5
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 22:41:33 -05:00
Eric F Crist
a33928c76b Merge in other commits suitable for v3.0.5 from masteer.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-07 09:41:39 -05:00
Richard Bonhomme
e3c51b39f1 Fix set_pass() 'nopass' option 2018-09-07 13:23:35 +01:00
Eric F Crist
97e1501424 Update default certificate length, comments
- Resolve #57, set default certificate length to 1080 days, leaves CA
  certifcates at 3650
- Add EasyRSA version to certificate comment for later troubleshooting
  and identification.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-08-23 16:51:17 -05:00
Richard Bonhomme
c14f3c6b16 libressl: minor style corrections 2018-08-23 21:26:30 +01:00
Richard Bonhomme
24913874f5 libressl: use make_ssl_config and safessl-easyrsa.cnf for revoke 2018-08-23 21:20:53 +01:00
Richard Bonhomme
0d1c17a0e9 libressl: use make_ssl_config and safessl-easyrsa.cnf for gen_crl 2018-08-23 21:16:32 +01:00
Richard Bonhomme
185a5b671f libressl: use make_ssl_config and safessl-easyrsa.cnf for sign_req 2018-08-23 21:12:39 +01:00
Richard Bonhomme
247199489e libressl: use make_ssl_config and safessl-easyrsa.cnf for gen_req 2018-08-23 21:10:57 +01:00
Richard Bonhomme
95871dca5e libressl: use make_ssl_config and safessl-easyrsa.cnf for build_ca 2018-08-23 21:05:26 +01:00
Richard Bonhomme
af9b01944e libressl: use make_ssl_config() for easyrsa openssl version check 2018-08-23 20:36:48 +01:00
Richard Bonhomme
9fafe1c352 libressl: add notify SSL library in use 2018-08-23 20:29:35 +01:00
Richard Bonhomme
6c171b7882 libressl: switch to using safessl-easyrsa.cnf
Keep openssl-easyrsa.cnf but switch to using safessl-easyrsa.cnf
Has the benefit of fixing easyrsa3 openssl version check for libressl
2018-08-23 20:22:43 +01:00
Richard Bonhomme
b647256313 libressl: introduce function make_ssl_config
This function reads openssl-easyrsa.cnf and then
removes "ENV::" and replaces "$vars" with value
then writes the results to safessl-easyrsa.cnf
2018-08-23 20:12:55 +01:00
Richard Bonhomme
000b47712a libressl: prepare openssl-easyrsa.cnf for use with libressl 2018-08-23 20:03:36 +01:00
Hugues Fafard
63224439a6 Fixed broken nopass option in build-ca subcommand 2018-02-26 15:53:08 +01:00
Eric F Crist
d37a608944 merge branch 'honor-vars' of https://github.com/Antagonym/easy-rsa into v3.0.5
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-02-26 07:34:23 -06:00
Eric F Crist
67f76dafe0 Remove quotes around $pkcs_opts
Credit to @OtherSystems and @Antagonym and some others who pointed this out.  This
resolves #189 and #193 and #186 and #179.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-02-26 07:26:49 -06:00
Hugues Fafard
8b728d6a9e Merge remote-tracking branch 'upstream/v3.0.5' into honor-vars 2018-02-26 14:22:19 +01:00
Kodie Glosser
1968cb0259 formatting and travis fix 2018-02-21 10:55:15 -06:00
Hugues Fafard
9f5267a0a7 Honor priv-key related settings during build-ca
The EASYRSA_ALGO, EASYRSA_KEY_SIZE, and EASYRSA_CURVE settings in
`vars`, as well as their runtime overrides are ignored during `build-ca`
since 6268cd9. This restores previous behavior of honring the settings.

Should also fix #179.
2018-02-10 17:53:51 +01:00
Eric F Crist
ca201d7ba8 Fix format string in printf
I knew this was hanging out there, but Antagoynm found it before I was
able to resolve it.  There was a message from shellcheck regarding this
one:
	SC2059: Don't use variables in the printf format string. Use
printf "..%s.." "$foo".

Should resolve #181

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-02-01 17:59:17 -06:00
Eric F Crist
a1ed80517b Use stty -echo instead of read -s
Some Linux distros and BSD sh don't support the -s option to the read
builin.  This is the POSIX way to handle secure input to a tty.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-21 23:41:07 -06:00
Eric F Crist
fae653879e Default CA key to AES256
Defaults the CA key created using AES256.

This resolves #58 and resolves #17

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-21 11:10:25 -06:00
Eric F Crist
3861b37672 Merge branch 'v3.0.4'
Merging up to master.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-21 10:13:34 -06:00
Eric F Crist
ab8fa4803d Wrong SC code.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-03 20:39:09 -06:00
Eric F Crist
6e69b85e3e additional automation
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-03 20:36:14 -06:00
Eric F Crist
972a999a40 This breaks stuff (probably)
Attempts at making shellcheck happy and a little bit of sanity checking
for travis-ci.  Going to try and get some basic easyrsa commands going
next, once I figure out what travis-ci's environment looks like.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-01-03 18:54:23 -06:00
Bob Vincent
da1942a2ab Allow "--copy-ext" without a value. (https://github.com/OpenVPN/easy-rsa/pull/153) 2018-01-02 16:53:15 -05:00
Bob Vincent
7799d78cac Fix the --subject-alt-name option. 2018-01-02 16:53:13 -05:00
Bob Vincent
be20590d50 Allow "--copy-ext" without a value. (https://github.com/OpenVPN/easy-rsa/pull/153) 2018-01-02 16:52:16 -05:00
Bob Vincent
32a35bb18b Fix the --subject-alt-name option. 2018-01-02 16:50:14 -05:00
Bob Vincent
afeb05b502 Fix generation of serverAltName. 2018-01-01 13:43:42 -05:00
Bob Vincent
d3f1da5abe Fix generation of serverAltName. 2018-01-01 13:41:18 -05:00