nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
407 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

407 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
a1346054
c6dd7ff1f6
Fix typo 2019-11-24 15:41:39 +00:00
a1346054
bd4135b453
Spelling 2019-11-24 15:25:37 +00:00
Eric F Crist
8e862614fa
Failed to add the new op_test.sh script 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 08:15:04 -05:00
Eric F Crist
1190152c9b
move unit tests to easyrsa-unit-test repo 
This modifies the op_test.sh script to pull a working copy of the actual
unit tests from the easyrsa-unit-test repo.  This allows us to update
the unit test script outside the easy-rsa repo.

A current limitation of the way we've integrated TravisCI is that the
repo and tests go hand-in-hand.  This means that if a test is broken or
otherwise needs an update, it has to come with the PR itself.  There's
never a point of re-running a TravisCI test, since the test is part of
that repo.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 08:11:22 -05:00
Eric F Crist
2315b2c186
Merge branch 'TinCanTech-master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 07:29:02 -05:00
Eric F Crist
cb2e4b4e9e
Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2019-09-25 07:28:44 -05:00
Eric F Crist
124cd31508
Merge branch 'davidrios-master' 
Fixes #218, corrects name for IP option of SAN

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-25 07:27:21 -05:00
Eric F Crist
d0c91e4d38
Merge branch 'master' of https://github.com/davidrios/easy-rsa into davidrios-master 2019-09-25 07:27:01 -05:00
Richard Bonhomme
3f921404d6
Upgrade to 306: Create $EASYRSA_SSL_CONF if required 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-09-23 20:50:53 +01:00
Eric F Crist
8adaf98fa9
Merge branch 'TinCanTech-master' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-09-20 11:26:01 -05:00
Richard Bonhomme
47eecc48a8
Improve usage text 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-09-20 17:17:46 +01:00
Richard Bonhomme
67bac6c7f1
optest.sh shellcheck compliance 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-09-20 16:57:25 +01:00
David Rios
3301c09f5c Fix correct name for IP option of subjectAltName 2019-09-19 16:23:07 -03:00
David Rios
e4c9b5ed36 Copy Subject Alternative Name from REQ. Fixes #218 2019-09-19 14:40:45 -03:00
Richard Bonhomme
73523b0da3
Expand op_test: Inconsistent SAN behaviour 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-12 21:52:59 +01:00
Richard Bonhomme
57ef07f133
Win32 mktemp help 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-12 14:28:06 -05:00
Richard Bonhomme
e426db231d
Fail with error to create EASYRSA_TEMP_DIR 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-11 01:29:04 +01:00
Richard Bonhomme
ad3b35644d
Fix op_test.sh shellcheck SC2086 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 23:01:54 +01:00
Richard Bonhomme
939ddc49da
Add required shellcheck to cleanup() 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 22:25:19 +01:00
Richard Bonhomme
70ddded80b
Tidy up op_test.sh verbose 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 21:08:21 +01:00
Richard Bonhomme
0acb8bdd17
Silence shellcheck 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 20:34:28 +01:00
Richard Bonhomme
713f1d633e
Default SAN for serverClient, additional op_test 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 20:13:59 +01:00
Richard Bonhomme
1fa5003081
Work around Windows mktemp bug 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 18:32:47 +01:00
Richard Bonhomme
2dc63cd6fc
Re-instate OPENSSL_CONF and EASYRSA_SAFE_CONF 
EASYRSA_SAFE_CONF is libressl compatible config file.
Create EASYRSA_SAFE_CONF during init-pki, one time per PKI.
Set OPENSSL_CONF to be EASYRSA_SAFE_CONF, to prevent bogus warnings.

Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 18:21:44 +01:00
Richard Bonhomme
38ad124088
op_test.sh: remove old style custom ssl lib tests 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 17:46:23 +01:00
Richard Bonhomme
c763f3ad28
Improve wop_test.bat 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-10 14:18:29 +01:00
Eric F Crist
81b4ec923d
Clean up wait_sec() 
Make wait_sec() accept an argument for time so it behaves more like
sleep.

Merge branch 'TinCanTech-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 08:56:00 -05:00
Eric F Crist
4af5aecb49
Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2019-06-07 08:55:45 -05:00
Richard Bonhomme
fbb5e30858
op_test.sh: adhere to shellcheck 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-07 14:51:33 +01:00
Eric F Crist
bf7477f9d5
more typos, thanks xavierb! 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 08:48:06 -05:00
Eric F Crist
d7b0c781f4
typos in ChangeLog (thanks xavierb) 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 08:45:35 -05:00
Richard Bonhomme
f6e26cd42c
Improve op_test.sh: make wait_sec variable; Add server with SAN renew test. 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-07 14:38:38 +01:00
Eric F Crist
2412fa31b5
Updating changelog 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:56:24 -05:00
Eric F Crist
1ac0760867
Shore up Windows test framework 
Merge branch 'TinCanTech-master'

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:52:32 -05:00
Eric F Crist
1d695fc912
Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2019-06-07 07:52:08 -05:00
Eric F Crist
03a464a1da
Merge branch 'xavierba-fix_305' 
fixes #305

Gracefully handle IP when both renewing cert and keeping SAN from the
old certificate

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:32:48 -05:00
Eric F Crist
aeaebfb599
Merge branch 'fix_305' of https://github.com/xavierba/easy-rsa into xavierba-fix_305 2019-06-07 07:32:33 -05:00
Eric F Crist
e8811e10e6
Merge branch 'luizluca-fix_dirtemp_windows' 
workaround for but in the win32 mktemp utility

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:31:17 -05:00
Eric F Crist
013f29556d
Merge branch 'fix_dirtemp_windows' of https://github.com/luizluca/easy-rsa into luizluca-fix_dirtemp_windows 2019-06-07 07:30:59 -05:00
Eric F Crist
5340fb2dfc
Merge branch 'luizluca-fix_read_s' 
Should "fix" errors related to ash and potentially other non-POSIX
shells that don't handle set -o or related options.

http://www.austingroupbugs.net/view.php?id=1207

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-06-07 07:25:04 -05:00
Xavier Bachelot
a41ce243c3
Gracefuly handle IP when both renewing cert and keeping SAN from the old cert 
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
 2019-06-07 11:43:44 +02:00
Luiz Angelo Daros de Luca
44509c77ec
Try 'stty', 'set -o echo' and then read -s 
Although 'read -s' is not POSIX, it might be the only option
for some systems (OpenWrt). Try each alternative and, if all
those fails, warn the user and read with "echo on".

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-06-04 17:56:53 -03:00
Richard Bonhomme
1c0a9dfddd
Add Windows operational test 
Signed-off-by: Richard Bonhomme <tincanteksup@gmail.com>
 2019-06-04 17:27:02 +01:00
Luiz Angelo Daros de Luca
e2a8b78d9a
workaround win32 mktemp bug 
win32 mktemp shipped by easyrsa does not work. It returns
unmodified template as the "temporary file". This results
in file conflicts when two temporary files are in use.
However win32 mktemp -d does work as expected. So, we can use
mktemp -du to generate a correct temporary file name.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-30 18:53:22 -03:00
Luiz Angelo Daros de Luca
12ee30a802
check for failed easyrsa_mktemp 
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
 2019-05-30 18:52:27 -03:00
Eric F Crist
8374fcb4da
Adding support back in for incremental serials 
Not enabled by default.  Should fix #177.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-17 06:50:08 -05:00
Eric F Crist
6b7b6bf1f0
Merge branch 'IPv4v6-x509-type-email' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:41:27 -05:00
Eric F Crist
9c0c15d062
Merge branch 'x509-type-email' of https://github.com/IPv4v6/easy-rsa into IPv4v6-x509-type-email 2019-05-06 22:41:05 -05:00
Eric F Crist
51ac28e19e
Merge branch 'luizluca-batch_ops' 
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
 2019-05-06 22:38:01 -05:00
Eric F Crist
bcec3b9ce6
Merge branch 'batch_ops' of https://github.com/luizluca/easy-rsa into luizluca-batch_ops 2019-05-06 22:37:01 -05:00