nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
824 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

824 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Richard T Bonhomme
a52d6c5a71
Make gen_req() Always use EASYRSA_REQ_CN as intended 
All requests now have the specified commonName <FILE_NAME_BASE>

Changes:

* Separate EASYRSA_BATCH from internal SSL -batch option.
  This makes the code easier to understand.

* If both EASYRSA_BATCH and openssl_batch are unset then full
  inter-active mode is enabled.  The user can verify the input.

  Otherwise SSL interactive is disabled and no user interaction
  is required.

  In either case, all DN fields are fully populated, depending on
  EASYRSA_DN mode ('org' or 'cn_only').

Closes: #456

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-02 15:42:56 +01:00
Richard T Bonhomme
9970d626c1
Merge branch 'wiscii-remove-copy_data_to_pki' (#521) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-01 16:46:54 +01:00
Wharf in Ships Clothing
b25d74e6b7
Remove obsolete function copy_data_to_pki() 
Signed-off-by: Wharf in Ships Clothing <wiscii@protonmail.com>
 2022-04-01 16:03:52 +01:00
Richard T Bonhomme
821827028e
gitignore: Add shellcheck 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-01 00:16:55 +01:00
Richard T Bonhomme
0d29396070
General formatting corrections (NFC) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 23:00:47 +01:00
Richard T Bonhomme
14a29f9fca
Merge branch 'Antagonym-soft-reset' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 22:50:43 +01:00
Richard T Bonhomme
24a2b4fa77
Merge branch 'soft-reset' of ssh://github.com/Antagonym/easy-rsa into Antagonym-soft-reset 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 22:00:25 +01:00
Richard T Bonhomme
58000f777b
Merge branch 'pacija-patch-1' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 19:56:11 +01:00
Richard T Bonhomme
6759e87dd9
Merge branch 'patch-1' of ssh://github.com/pacija/easy-rsa into pacija-patch-1 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 19:54:22 +01:00
Richard T Bonhomme
7c3f41ab68
Merge branch 'TinCanTech-master' (#518) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 13:45:53 +01:00
Richard T Bonhomme
dc2da4ed45
Merge branch 'master' of /TinCanTech/easy-rsa into TinCanTech-master 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 13:44:29 +01:00
IPv4v6
6bdbc8ef97
Add authority information access example (#307) 2022-03-30 21:43:25 +01:00
Richard T Bonhomme
f48e7fe9e3
Archive travis.yml to easyrsa-unit-tests repository 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-30 00:32:39 +01:00
Richard T Bonhomme
b3a1d54e8c
Merge branch 'TinCanTech-master' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:50:26 +01:00
Richard T Bonhomme
ef59ea7dd9
copy_data_to_pki(): Immediate exit-with-error or 'shift' on success 
This captures any copy errors and/or clears the excess second parameter.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:38:37 +01:00
Richard T Bonhomme
4ff6b773d2
Merge branch 'TinCanTech-master' (#515) 
Add notice to 'init-pki': 'vars' file has now moved to PKI.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:08:00 +01:00
Richard T Bonhomme
7690574315
Add notice to 'init-pki': 'vars' file has now moved to PKI above 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:02:14 +01:00
Richard T Bonhomme
672b56b6ba
Merge branch 'mxc5178-master' 
Minor white-space and typo corrections.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 20:59:00 +01:00
Richard T Bonhomme
59cf4b50d3
Merge branch 'master' of mxc5178/easy-rsa into mxc5178-master (#67) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 20:53:10 +01:00
Richard T Bonhomme
462f12a802
Merge branch 'TinCanTech-master' (#514) 
Improve install_data_to_pki(): Create pki/vars at 'init-pki'

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 17:39:48 +01:00
Richard T Bonhomme
d88ec8bea3
Improve install_data_to_pki(): Create pki/vars at 'init-pki' 
Bug: '$1' is not cleared, therefore 'pki/vars' was always created.

Explicitly require 'context:$1' (init-pki or vars-setup), otherwise die.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 17:30:24 +01:00
Richard T Bonhomme
606cc48874
Merge 'TinCanTech-master' - Add 'init' to install_data_to_pki() 
This will create EASYRSA_PKI/vars from example for all new PKIs.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 16:20:17 +01:00
Richard T Bonhomme
a6db7f496f
When initialising a new PKI, create "$EASYRSA_PKI/vars' from example 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 16:15:01 +01:00
Richard T Bonhomme
90b10c3514
Move 'op_test.orig' to Openvpn/easyrsa-unit-tests repository 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:57:01 +01:00
Richard T Bonhomme
615c643473
Rename unit test files 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:48:33 +01:00
Richard T Bonhomme
2b2ef5f7b8
Enable shellcheck test - Use version 0.8.0 from easyrsa-unit-tests 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:00:45 +01:00
Richard T Bonhomme
7510f6163c
Temporarily disable shellcheck test 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 02:06:28 +01:00
Richard T Bonhomme
7c97dcd864
Do full shellcheck test. Wrap nasty long lines. 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 01:59:15 +01:00
Richard T Bonhomme
9e109cdd7d
Hard wrap excessively long lines 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 00:38:20 +01:00
Richard T Bonhomme
0cb51cf1a1
Update ChangeLog - OpenSSL version 3 and Packaging notices 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 00:10:45 +01:00
Richard T Bonhomme
875dd27808
Improvements to shellcheck compliance 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:47:12 +01:00
Richard T Bonhomme
ec6d072707
Merge branch 'TinCanTech-master' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:30:37 +01:00
Richard T Bonhomme
3f7c7df911
Merge branch 'master' of 'TinCanTech/easy-rsa' into TinCanTech-master 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:29:15 +01:00
Richard T Bonhomme
388aa0396e
Declare 'vars_file' without use 
This is a deliberate misuse of shellcheck: Reminder to fix PKI/vars.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 22:57:51 +01:00
Richard T Bonhomme
a8a2171716
Optimize install_data_to_pki() 
Thanks to excellent community feedback, this patch forces a single,
reliable list of sources for EasyRSA data-files.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 22:44:50 +01:00
Richard T Bonhomme
bc07187073
Change install_data_to_pki() failures to non-fatal warnings 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 13:40:28 +01:00
Richard T Bonhomme
80a3ad2943
vars.example: Merge branch 'Prouflon-safessl-patch' 
Change $EASYRSA_SSL_CONF to correct default value

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 17:41:22 +01:00
Richard T Bonhomme
5255d90b9a
Merge branch: 'safessl-patch' of github.com/Prouflon/easy-rsa-1 
Change '$EASYRSA_SSL_CONF' to correct default value in example file.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 17:39:34 +01:00
Richard T Bonhomme
3222d17b5e
Introduce install_data_to_pki() - Copy data-files to PKI 
The purpose here is to force EasyRSA find the required data-files:

* 'openssl-easyrsa.cnf' MUST be found.
* 'x509-types' MUST be found.
* 'vars.example' should be found.
* 'vars'
  The 'vars' file is more complicated due to user expectations.
  This patch does not copy 'vars', the code is included but DISABED.

The reasons are:

* Allow running 'easyrsa' from PATH.
* Make standard packaging work correctly.

Bug fixes:

* #499 and associated issues with missing files.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 14:16:32 +01:00
Richard T Bonhomme
6deae0823e
Merge branch 'TinCanTech-master' #507 
Add SSL Library version 2 to easyrsa_openssl()

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 19:04:43 +00:00
Richard T Bonhomme
ed7380bab8
Add SSL Library version 2 to easyrsa_openssl() 
Closes: #504

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 18:52:23 +00:00
Richard T Bonhomme
f08d9a3cf9
Merge: branch 'TinCanTech-master' #505 
Expand new verify_ssl_lib() to support LibreSSL version 2.x (again)

Closes: #504

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 16:10:18 +00:00
Richard T Bonhomme
8c2a09f374
Expand new verify_ssl_lib() to support LibreSSL version 2.x (again) 
Changes made by a0dbc346bd92088ee481f5488ac53a7537b32073 result in
'ossl_major=2' and LibreSSL 2.x not being recognised.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 15:49:04 +00:00
Richard T Bonhomme
73e674a5ea
Merge branch 'markus-t314-bugfix/spaces_in_path' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-23 20:48:38 +00:00
Richard T Bonhomme
14d6e24377
Merge branch 'bugfix/spaces_in_path' 
markus-t314-bugfix/spaces_in_path

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-23 20:45:33 +00:00
Richard T Bonhomme
af0c70cbc9
Merge: Add CI status badge #501 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-23 19:30:57 +00:00
Richard T Bonhomme
258ec449ff
Windows unit test: Merge branch 'TinCanTech-master' 
On error then exit with error

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-23 00:09:29 +00:00
Richard T Bonhomme
ba11ec08a8
Windows unit test: On error then exit with error 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-22 23:05:34 +00:00
Richard T Bonhomme
39b06f1073
Unit test improvements 
* Allow local copy of unit tests to persist.
* Quote file-name exapansion for Windows setup.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-22 15:52:04 +00:00
Richard T Bonhomme
8284dec85b
Merge: Update EasyRSA-Readme.md #426 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-22 13:49:23 +00:00