407 Commits

Author SHA1 Message Date
Richard Bonhomme
35b1f59e44
Use EASYRSA specific temp file for output to set_pass
Signed-off-by: Richard Bonhomme <25598447+TinCanTech@users.noreply.github.com>
2019-01-01 18:07:17 +00:00
Javier Godoy
1a62872e05 Double quote to prevent globbing and word splitting 2018-12-22 06:05:00 -03:00
Javier Godoy
23d7051e76 Add optional CRL reason parameter 2018-12-16 18:18:28 -03:00
Javier Godoy
6227d89ec6 Preserve other environment variables 2018-12-16 18:03:58 -03:00
Richard Bonhomme
1061fc25f6
Merge pull request #1 from TinCanTech/TinCanTech-password-echo
Fix password echo
2018-12-16 18:17:26 +00:00
Richard Bonhomme
482c4b517f
Fix password echo 2018-12-16 18:16:48 +00:00
Eric F Crist
96696bcc7b
Merge branch 'TinCanTech-TinCanTech-sed-backtick' into v3.0.6
Resolves #267

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-12 08:59:43 -06:00
Richard Bonhomme
3b0d1992a7
Use escape backtick for sed separator
Signed-off-by: Richard Bonhomme <25598447+TinCanTech@users.noreply.github.com>
2018-12-12 14:17:23 +00:00
Eric F Crist
38575d870c
test suite fixes
* need the script to actually do more functional testing
* need to be able to test input, need something automated

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:39:21 -06:00
Eric F Crist
272ee0ea89
SC1147, remove local call
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:21:03 -06:00
Eric F Crist
391948f267
Update op_test to support show-cert, add'l cmds
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:15:21 -06:00
Eric F Crist
8760707020
Merge branch 'solidgoldbomb-add-show-ca-command' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 20:07:17 -06:00
Eric F Crist
14a5dc8a7a
Mergeing from solidgoldbomg for #118
Merge branch 'add-show-ca-command' of
   https://github.com/solidgoldbomb/easy-rsa
   into solidgoldbomb-add-show-ca-command
2018-12-11 20:04:05 -06:00
Eric F Crist
99eef5f278
More Travis-CI corrections.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 19:39:08 -06:00
Eric F Crist
f9fa4ca127
Shellcheck corrections
Make some corrections to appease shellcheck now that travis is working

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 18:18:31 -06:00
Eric F Crist
275b093f87
Update Travis-CI config to something that works?
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-12-11 17:56:30 -06:00
Stacey Sheldon
087d36a0d8 easyrsa: add show-ca command to display the ca certificate 2018-12-07 20:08:52 -05:00
Eric F Crist
b38f65927c
Merge branch 'luizluca-fix_default_expire'
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-04 17:43:28 -05:00
Luiz Angelo Daros de Luca
edf1e92a3f update EASYRSA_CERT_EXPIRE new default value
Improves 376c62f2b81e36db6f449ac7673013075b0c3ef1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-04 18:08:43 -03:00
Eric F Crist
3d002adf65
Merge branch 'luizluca-fix_initpki_openssl_path'
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-03 17:20:26 -05:00
Luiz Angelo Daros de Luca
fcffd650ee respect EASYRSA_SSL_CONF during init-pki
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-03 18:09:43 -03:00
Eric F Crist
e11b8566fe
trap sig exit, too
The clean_temp() function failed to be called on a clean exit due to the
previous change (446a58f).  Also adding in the bit from die() that I
failed to remember to push in.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 17:06:36 -05:00
Eric F Crist
aaf8e3d0d4
Merge branch 'TinCanTech-v3.0.6' into v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 13:39:40 -05:00
Eric F Crist
e7bd1efa91
Merge branch 'v3.0.6' of https://github.com/TinCanTech/easy-rsa into TinCanTech-v3.0.6
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 13:39:09 -05:00
Richard Bonhomme
e1e3ce8860
Improve hide_read_pass function
Follow example from prog_exit function
2018-10-02 18:52:05 +01:00
Eric F Crist
6bba336750
Missed file from 446a58f
I somehow missed adding this change, even though the file was part of
the commit.  git is hard.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:39:37 -05:00
Eric F Crist
f0204c160b
Fix minor build-dist.sh issues
* Use ~KEY~ pattern for replacement instead of ~~~, which doesn't scale.
* Include an empty string following -i for sed.  This prevents the extra
files from showing up with -e.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:34:50 -05:00
Eric F Crist
446a58f9f3
Broaden trap() functionality
Resolves #236 and #247

* Broaden trapped signals to SIGHUB, SIGINT, SIGQUIT, SIGABRT
* Turn echo back on upon exit.
* Provide a newline at exit just to make the terminal look pretty.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-10-02 10:02:40 -05:00
Richard Bonhomme
abbae14592
Improve hide_read_pass function 2018-09-29 13:57:05 +01:00
Eric F Crist
8356b3231d
Update README to point to new #easyrsa on Freenode.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-25 09:47:34 -05:00
Eric F Crist
f73a2d4be8 Merge branch 'TinCanTech-v3.0.6' into v3.0.6
Fix for echo issue on Windows for password prompts.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-24 20:17:44 -05:00
Richard Bonhomme
d065ee3432
Correct path to sh.exe 2018-09-25 01:10:15 +01:00
Richard Bonhomme
881404932b Function to hide password input 2018-09-24 23:42:26 +01:00
Eric F Crist
85c949ef21 Chicken/Egg config writing fixed
Only write out the default config to EASYRSA_PKI during init-pki
function call.  Assume it's there or error out when appropriate.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-15 10:43:49 -05:00
Eric F Crist
1daff987b3 Merge branch 'v3.0.5' of https://github.com/OpenVPN/easy-rsa into v3.0.6 2018-09-14 23:42:28 -05:00
Eric F Crist
119d0ffb7e Merge branch 'v3.0.5' of https://github.com/OpenVPN/easy-rsa into v3.0.5 2018-09-14 23:37:20 -05:00
Eric F Crist
4152244bae Merge branch 'v3.0.5' of https://github.com/OpenVPN/easy-rsa into v3.0.5
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 23:18:31 -05:00
Eric F Crist
78aca243b2 Ignore dist-staging path
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 23:16:55 -05:00
Eric F Crist
302dd05bbc Update changelog for v3.0.5 release
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 23:12:19 -05:00
Eric F Crist
c5ff31e867 Merge btamayo change.
Closes #214 in master

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 22:42:57 -05:00
Eric F Crist
8f9f8e0b74 Merge branch 'btamayo-patch-1' into v3.0.5
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-14 22:41:33 -05:00
Eric F Crist
d0326c0d49 Merge in other commits suitable for v3.0.5 from masteer.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-07 09:41:39 -05:00
Eric F Crist
ad00be3411 Merge branch 'TinCanTech-master'
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-07 09:19:17 -05:00
Eric F Crist
083b125064 Merge branch 'master' of https://github.com/OpenVPN/easy-rsa 2018-09-07 09:18:32 -05:00
Eric F Crist
7e750b4caa Merge branch 'master' of https://github.com/TinCanTech/easy-rsa into TinCanTech-master 2018-09-07 09:18:06 -05:00
Eric F Crist
a6192a7fe9 Update copyright date.
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-09-07 09:14:27 -05:00
Richard Bonhomme
4d084268b8
Fix set_pass() 'nopass' option 2018-09-07 13:23:35 +01:00
Eric F Crist
1eccb90148 Correct sed work on version replacement
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-08-23 17:01:55 -05:00
Eric F Crist
376c62f2b8 Update default certificate length, comments
- Resolve #57, set default certificate length to 1080 days, leaves CA
  certifcates at 3650
- Add EasyRSA version to certificate comment for later troubleshooting
  and identification.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-08-23 16:51:17 -05:00
Eric F Crist
93b0f2e74b Add LibreSSL support to EasyRSA
Merge branch 'TinCanTech-libressl'

This may also resolve the following issues:

 #130: cmd-opts nopass doesn't work
 #76:  LibreSSL exposes misuse of $ENV
 #74:  LibreSSL, Expected to find openssl command at: openssl
 #34:  unexpected EOF when using init-pki on OSX 10.9

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2018-08-23 16:32:09 -05:00