13 Commits

Author SHA1 Message Date
Eric F Crist
7f727b791b
Default cert expire down to 825 days
* resolves #52

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-11-25 19:17:46 -06:00
a1346054
bd4135b453
Spelling 2019-11-24 15:25:37 +00:00
Eric F Crist
8374fcb4da
Adding support back in for incremental serials
Not enabled by default.  Should fix #177.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-05-17 06:50:08 -05:00
Luiz Angelo Daros de Luca
6ecb6f489e
use temporary directory instead of individual files
Manually managing temp files into fixes variables (EASYRSA_TEMP_FILE_*),
can result in errors like in build_ca that reused EASYRSA_TEMP_FILE_3.
A temporary directory simplify the cleanup.

A configurable directory for temp files (var EASYRSA_TEMP_DIR) also
allows the user to define a different temporary directory. This is
important for devices using flash disks that have limited number of
writes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2019-05-02 18:26:56 -03:00
Xavier Bachelot
ff87fb1812
Make cert renew grace period configurable (default: 30 days)
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
2019-01-28 23:42:01 +01:00
Luiz Angelo Daros de Luca
edf1e92a3f update EASYRSA_CERT_EXPIRE new default value
Improves 376c62f2b81e36db6f449ac7673013075b0c3ef1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-04 18:08:43 -03:00
Eric F Crist
e8cd6c9807 Rename config to openssl-easyrsa.cnf
This clarifies the use of the file as specific to EasyRSA while also
closing the loop on the openssl version chase.  No reason to have a
configuration file that is specific to openssl version at this point.
If the need arises, we'll do so in a sane fashion.

Resolves #159

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2017-11-04 08:06:48 -05:00
Olav Reinert
d20d2b3c06 Update docs and examples to fit changes in 534f673 2017-07-27 08:27:27 +02:00
allo-
171834dd29 typo: Defualt 2014-09-14 17:50:14 +02:00
Josh Cepek
5758825baa Fix vars.example with proper path to extensions.temp
Related to issue #24. This does not yet resolve the vars_setup() logic
to assure unmodified variables use defaults rather than empty strings.
2014-07-27 07:19:49 -05:00
Josh Cepek
c86289ba17 Fix batch-mode handling with changes in e75ad75
The --batch CLI arg now takes no options and enables batch-mode when
present.

init-pki no longer takes a 'force' value which did the same as --batch.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-12-11 11:29:51 -06:00
Josh Cepek
cb74c35eb3 Update to ECDSA support from commit 45c27e9
Add documentation & help output; add quoting; add error messages; put
the ecparams dir under PKI dir with env-var tunable.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-24 23:37:27 -06:00
Josh Cepek
b0494ab243 Add initial 3.x codebase files
This is the initial re-write for the 3.x release series.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-18 02:54:07 -06:00