nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,758 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

1758 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Eric F Crist
2412fa31b5
Updating changelog 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:56:24 -05:00
Eric F Crist
1ac0760867
Shore up Windows test framework 
Merge branch 'TinCanTech-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:52:32 -05:00
Eric F Crist
1d695fc912
Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2019-06-07 07:52:08 -05:00
Eric F Crist
03a464a1da
Merge branch 'xavierba-fix_305' 
fixes #305

Gracefully handle IP when both renewing cert and keeping SAN from the
old certificate

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:32:48 -05:00
Eric F Crist
aeaebfb599
Merge branch 'fix_305' of https://github.com/xavierba/easy-rsa into xavierba-fix_305 2019-06-07 07:32:33 -05:00
Eric F Crist
e8811e10e6
Merge branch 'luizluca-fix_dirtemp_windows' 
workaround for but in the win32 mktemp utility

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:31:17 -05:00
Eric F Crist
013f29556d
Merge branch 'fix_dirtemp_windows' of https://github.com/luizluca/easy-rsa into luizluca-fix_dirtemp_windows 2019-06-07 07:30:59 -05:00
Eric F Crist
5340fb2dfc
Merge branch 'luizluca-fix_read_s' 
Should "fix" errors related to ash and potentially other non-POSIX
shells that don't handle set -o or related options.

http://www.austingroupbugs.net/view.php?id=1207

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:25:04 -05:00
Xavier Bachelot
a41ce243c3
Gracefuly handle IP when both renewing cert and keeping SAN from the old cert 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-06-07 11:43:44 +02:00
Luiz Angelo Daros de Luca
44509c77ec
Try 'stty', 'set -o echo' and then read -s 
Although 'read -s' is not POSIX, it might be the only option
for some systems (OpenWrt). Try each alternative and, if all
those fails, warn the user and read with "echo on".

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-06-04 17:56:53 -03:00
Richard Bonhomme
1c0a9dfddd
Add Windows operational test 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-04 17:27:02 +01:00
Luiz Angelo Daros de Luca
e2a8b78d9a
workaround win32 mktemp bug 
win32 mktemp shipped by easyrsa does not work. It returns
unmodified template as the "temporary file". This results
in file conflicts when two temporary files are in use.
However win32 mktemp -d does work as expected. So, we can use
mktemp -du to generate a correct temporary file name.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-30 18:53:22 -03:00
Luiz Angelo Daros de Luca
12ee30a802
check for failed easyrsa_mktemp 
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-30 18:52:27 -03:00
Rolf
951ce27ccf Merge branch 'master' of https://github.com/rolfchess/easy-rsa 2019-05-17 13:56:58 +02:00
Rolf
abaa2f57b4 Show helpful error when vars file is missing 2019-05-17 13:52:33 +02:00
Eric F Crist
8374fcb4da
Adding support back in for incremental serials 
Not enabled by default.  Should fix #177.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-17 06:50:08 -05:00
Olliver Schinagl
e21ed159a1
Use intermediate CA rather then sub CA 
The term 'sub-ca' seems to be coined and used mostly/only by easyrsa.
More commonly, this type of certificate is called an intermediate CA
[0]. The term sub-ca, while logical is actually a Microsoft CA term [1].

The command itself remains the same for now, as it is shorter/easier to
type.

[0] https://en.wikipedia.org/w/index.php?title=Intermediate_certificate_authorities
[1] https://en.wikipedia.org/wiki/Public_key_infrastructure

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
 2019-05-17 10:31:26 +02:00
Olliver Schinagl
7f2936caf9
doc: Add signing example to the readme. 
While it is documented in the quickstart, it was missing from the
readme, which is confusing as all other commands are shown with an
example in the document.

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
 2019-05-17 10:15:46 +02:00
Eric F Crist
6b7b6bf1f0
Merge branch 'IPv4v6-x509-type-email' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:41:27 -05:00
Eric F Crist
541c6d94ca Merge branch 'IPv4v6-x509-type-email' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:41:27 -05:00
Eric F Crist
9c0c15d062
Merge branch 'x509-type-email' of https://github.com/IPv4v6/easy-rsa into IPv4v6-x509-type-email 2019-05-06 22:41:05 -05:00
Eric F Crist
d28ab306e8 Merge branch 'x509-type-email' of https://github.com/IPv4v6/easy-rsa into IPv4v6-x509-type-email 2019-05-06 22:41:05 -05:00
Eric F Crist
51ac28e19e
Merge branch 'luizluca-batch_ops' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:38:01 -05:00
Eric F Crist
a020d4b3be Merge branch 'luizluca-batch_ops' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:38:01 -05:00
Eric F Crist
bcec3b9ce6
Merge branch 'batch_ops' of https://github.com/luizluca/easy-rsa into luizluca-batch_ops 2019-05-06 22:37:01 -05:00
Eric F Crist
782fb42986 Merge branch 'batch_ops' of https://github.com/luizluca/easy-rsa into luizluca-batch_ops 2019-05-06 22:37:01 -05:00
Eric F Crist
c3853eefa4
Merge branch 'luizluca-fix_firstcert_warn' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:32:53 -05:00
Eric F Crist
81aa0298a1 Merge branch 'luizluca-fix_firstcert_warn' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:32:53 -05:00
Eric F Crist
5d87cdcfae
Merge branch 'fix_firstcert_warn' of https://github.com/luizluca/easy-rsa into luizluca-fix_firstcert_warn 2019-05-06 22:32:34 -05:00
Eric F Crist
e6c64675d5 Merge branch 'fix_firstcert_warn' of https://github.com/luizluca/easy-rsa into luizluca-fix_firstcert_warn 2019-05-06 22:32:34 -05:00
Eric F Crist
f56c81b584
Merge branch 'luizluca-temp_dir' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:26:22 -05:00
Eric F Crist
048fd29a64 Merge branch 'luizluca-temp_dir' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:26:22 -05:00
Eric F Crist
59f4923078
Merge branch 'temp_dir' of https://github.com/luizluca/easy-rsa into luizluca-temp_dir 2019-05-06 22:26:03 -05:00
Eric F Crist
09d9197579 Merge branch 'temp_dir' of https://github.com/luizluca/easy-rsa into luizluca-temp_dir 2019-05-06 22:26:03 -05:00
Eric F Crist
9d78538d30
Merge branch 'luizluca-fix_failed_buildfull_master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:19:54 -05:00
Eric F Crist
21459a2b8d Merge branch 'luizluca-fix_failed_buildfull_master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:19:54 -05:00
Eric F Crist
a4dc103a87
Merge branch 'fix_failed_buildfull_master' of https://github.com/luizluca/easy-rsa into luizluca-fix_failed_buildfull_master 2019-05-06 22:19:25 -05:00
Eric F Crist
a1348e6113 Merge branch 'fix_failed_buildfull_master' of https://github.com/luizluca/easy-rsa into luizluca-fix_failed_buildfull_master 2019-05-06 22:19:25 -05:00
Eric F Crist
c700e79905
Merge branch 'luizluca-follow_symblink' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 21:46:46 -05:00
Eric F Crist
198ff1e722 Merge branch 'luizluca-follow_symblink' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 21:46:46 -05:00
Eric F Crist
1899bcdc72
Merge branch 'follow_symblink' of https://github.com/luizluca/easy-rsa into luizluca-follow_symblink 2019-05-06 21:46:25 -05:00
Eric F Crist
d38f545de1 Merge branch 'follow_symblink' of https://github.com/luizluca/easy-rsa into luizluca-follow_symblink 2019-05-06 21:46:25 -05:00
Eric F Crist
942fa82a2a
Merge branch 'luizluca-fix_trap_exit_v2' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 21:41:36 -05:00
Eric F Crist
1db9bf80ad Merge branch 'luizluca-fix_trap_exit_v2' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 21:41:36 -05:00
Stefan Pietsch
d228fbc796 Set nonRepudiation bit for email certificates 2019-05-06 23:52:55 +02:00
Stefan Pietsch
4ee64ac3e3 Set nonRepudiation bit for email certificates 2019-05-06 23:52:55 +02:00
Stefan Pietsch
a2ae82477d Add x509-type for email certificates 2019-05-04 16:48:46 +02:00
Stefan Pietsch
9593009221 Add x509-type for email certificates 2019-05-04 16:48:46 +02:00
Luiz Angelo Daros de Luca
cdaa4a1fb0
include index.txt.attr as CA files 
Remove a warning when the first certificate is generated

Can't open .../easy-rsa/pki/index.txt.attr for reading, No such file or directory

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-02 19:13:48 -03:00
Luiz Angelo Daros de Luca
8116178e4d include index.txt.attr as CA files 
Remove a warning when the first certificate is generated

Can't open .../easy-rsa/pki/index.txt.attr for reading, No such file or directory

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-02 19:13:48 -03:00