nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
724 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

724 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Richard Bonhomme
2c2902613b
Add required temp file 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 17:08:13 -06:00
Richard Bonhomme
0d113a0577 Add required temp file 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 17:08:13 -06:00
Eric F Crist
5c468a697c
Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 16:27:33 -06:00
Eric F Crist
92e227fa00 Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 16:27:33 -06:00
Richard Bonhomme
1a8962639b
Remove unused var 2019-01-29 22:06:16 +00:00
Richard Bonhomme
418bb30580 Remove unused var 2019-01-29 22:06:16 +00:00
Richard Bonhomme
9bdb97d5e3
Update op_test.sh usage; Add error count and custom library hook 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-29 21:54:19 +00:00
Richard Bonhomme
8ff75ad96b Update op_test.sh usage; Add error count and custom library hook 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-29 21:54:19 +00:00
Eric F Crist
83ae8ad3e5
Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into v3.0.6 
Add additional tests to op_test.sh

Clsoing #292

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 14:31:06 -06:00
Eric F Crist
3c8c20d159 Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into v3.0.6 
Add additional tests to op_test.sh

Clsoing #292

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 14:31:06 -06:00
Eric F Crist
e6d858f2ae
Removing trap left in by mistake 
In my test for fixing I left the ERR trap in place.  non-posix, removing

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:56:13 -06:00
Eric F Crist
2543bb2db6 Removing trap left in by mistake 
In my test for fixing I left the ERR trap in place.  non-posix, removing

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:56:13 -06:00
Eric F Crist
ea464c1b08
Fixes #293 
die() wasn't calling clean_temp;  Now it is.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:32:36 -06:00
Eric F Crist
e1f8aed886 Fixes #293 
die() wasn't calling clean_temp;  Now it is.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-29 13:32:36 -06:00
Eric F Crist
818f76937e
Merge branch 'xavierba-renew_fixes' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-28 19:55:12 -06:00
Eric F Crist
c93d8066cb Merge branch 'xavierba-renew_fixes' into v3.0.6 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-28 19:55:12 -06:00
Eric F Crist
9f2a5bec5a
Merge branch 'renew_fixes' of https://github.com/xavierba/easy-rsa into xavierba-renew_fixes 2019-01-28 19:54:46 -06:00
Eric F Crist
044d2220e7 Merge branch 'renew_fixes' of https://github.com/xavierba/easy-rsa into xavierba-renew_fixes 2019-01-28 19:54:46 -06:00
Xavier Bachelot
332ec2d38b
Prevent using an empty SAN 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:43:06 +01:00
Xavier Bachelot
4ccde23e07 Prevent using an empty SAN 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:43:06 +01:00
Xavier Bachelot
c961210bda
Don't try to move inexistant files 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:50 +01:00
Xavier Bachelot
8b24da13fd Don't try to move inexistant files 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:50 +01:00
Xavier Bachelot
9de1173584
Workaround older openssl which don't have -ext 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:28 +01:00
Xavier Bachelot
2f841e9fec Workaround older openssl which don't have -ext 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:28 +01:00
Xavier Bachelot
ff87fb1812
Make cert renew grace period configurable (default: 30 days) 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:01 +01:00
Xavier Bachelot
7966cc287a Make cert renew grace period configurable (default: 30 days) 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:42:01 +01:00
Xavier Bachelot
6eff1118f8
Fix broken check for cert expiration time in renew command 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:40:40 +01:00
Xavier Bachelot
b904f0c5d3 Fix broken check for cert expiration time in renew command 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-01-28 23:40:40 +01:00
Richard Bonhomme
88aa03ae50
Add server renew and tiny lag to verify date field 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-28 22:18:39 +00:00
Richard Bonhomme
348bcab699 Add server renew and tiny lag to verify date field 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-28 22:18:39 +00:00
Eric F Crist
2c88190e5b
Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Add tests for certificate renewal

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-28 16:00:51 -06:00
Eric F Crist
6be0b7fc01 Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Add tests for certificate renewal

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-28 16:00:51 -06:00
Richard Bonhomme
64417dac68
Add renew_cert() to op_test.sh 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-27 18:40:49 +00:00
Richard Bonhomme
d55c4ab83a Add renew_cert() to op_test.sh 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-27 18:40:49 +00:00
Eric F Crist
c7b8ffb701
Fix trap() and prog_exit() so it exits correctly 
Fixes #282

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 16:57:54 -06:00
Eric F Crist
4b3eba59a3 Fix trap() and prog_exit() so it exits correctly 
Fixes #282

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 16:57:54 -06:00
Richard Bonhomme
a55f58b5a5
Improve op_test.sh: Fine grain control "show ca/cert" 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 15:00:33 -06:00
Richard Bonhomme
6351d321a3 Improve op_test.sh: Fine grain control "show ca/cert" 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 15:00:33 -06:00
Eric F Crist
08d72e0c9d
Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Effective fix for the bandaid needed in 16c584371641d1a15b73d1be179b0eee132dec3b

My commit (9d6077d91592f43294383de4698c878a039329e9) created an
inadvertent problem for @TinCanTech in his local testing due to some
other latent code.  The bandaid above was to prevent my "fix" from
deleting his test code in future pulls.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 13:11:48 -06:00
Eric F Crist
4544691623 Merge branch 'TinCanTech-v3.0.6' into v3.0.6 
Effective fix for the bandaid needed in 16c584371641d1a15b73d1be179b0eee132dec3b

My commit (9d6077d91592f43294383de4698c878a039329e9) created an
inadvertent problem for @TinCanTech in his local testing due to some
other latent code.  The bandaid above was to prevent my "fix" from
deleting his test code in future pulls.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-26 13:11:48 -06:00
Richard Bonhomme
2ca66d331a
Improve op_test.sh 
New op_test.sh was commited before it was ready:
* Improve TEMP_DIR management (./easyrsa3/temp must not exist)
* Use WORK_DIR (./easyrsa3)
* Clean up CUSTOM_OPTS
* Clean up Sample requests
* Clean up destroy_data (openssl_easyrsa.cnf must be restored)
* Added note to import_req
* Re-instate DEPS_DIR hooks
* Improve output (newline)
* Add required shellcheck exclusions (# shellcheck disable=SC2086 two instances)

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-26 18:21:47 +00:00
Richard Bonhomme
d801b75c98 Improve op_test.sh 
New op_test.sh was commited before it was ready:
* Improve TEMP_DIR management (./easyrsa3/temp must not exist)
* Use WORK_DIR (./easyrsa3)
* Clean up CUSTOM_OPTS
* Clean up Sample requests
* Clean up destroy_data (openssl_easyrsa.cnf must be restored)
* Added note to import_req
* Re-instate DEPS_DIR hooks
* Improve output (newline)
* Add required shellcheck exclusions (# shellcheck disable=SC2086 two instances)

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-26 18:21:47 +00:00
Richard Bonhomme
46629b56b4
gitignore: Remove "temp/*" -- Add "testdeps/*" 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-26 17:49:46 +00:00
Richard Bonhomme
699c8780fc gitignore: Remove "temp/*" -- Add "testdeps/*" 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-01-26 17:49:46 +00:00
Eric F Crist
883aa46664
Update changelog for #286 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-25 10:51:21 -06:00
Eric F Crist
99b126aec3 Update changelog for #286 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-25 10:51:21 -06:00
Eric F Crist
1ab456a46d
Add renew support into EasyRSA 
This provides support to renew certificates 30 days before expiration of
the original certificate.

Behavior Change: This adds the ability to create certificates with
duplicate CNs, which differs from previous releases.

Merge branch 'xavierba-renew' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-25 10:47:32 -06:00
Eric F Crist
240c82ac42 Add renew support into EasyRSA 
This provides support to renew certificates 30 days before expiration of
the original certificate.

Behavior Change: This adds the ability to create certificates with
duplicate CNs, which differs from previous releases.

Merge branch 'xavierba-renew' into v3.0.6

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-01-25 10:47:32 -06:00
Eric F Crist
03c43b31b8 Merge branch 'renew' of https://github.com/xavierba/easy-rsa into xavierba-renew 2019-01-25 10:46:52 -06:00
Eric F Crist
7676e33a6e Merge branch 'renew' of https://github.com/xavierba/easy-rsa into xavierba-renew 2019-01-25 10:46:52 -06:00