nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
832 Commits 1 Branch 0 Tags 43 MiB
Commit Graph

832 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Richard T Bonhomme
ebcbc8f559
Merge branch 'TinCanTech-fix-gen-req-cn' 
Note:

Also added command line option 'text' to include the request text
in the request file.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 16:50:25 +01:00
Richard T Bonhomme
4ec775e4a8
Merge branch 'fix-gen-req-cn' of ssh://github.com/TinCanTech/easy-rsa into TinCanTech-fix-gen-req-cn 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 16:49:13 +01:00
Richard T Bonhomme
a5669ed574
Insert missing '$' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 16:29:32 +01:00
Richard T Bonhomme
c345d0b7b8
Minor formatting correction 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 16:24:14 +01:00
Richard T Bonhomme
179aa1763a
Actions: Add flag to enable --x509-alt unit tests 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 01:02:59 +01:00
Richard T Bonhomme
57285db4ff
Minor improvements - Guard from my changes 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-05 00:59:48 +01:00
Richard T Bonhomme
ee51c1cc91
Unit-test: Only use shellcheck if easyrsa is present in ./easyrsa3/ 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-03 22:03:58 +01:00
Richard T Bonhomme
7227adcca2
Rigorously quote all use of "$EASYRSA_BATCH" 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-03 02:31:55 +01:00
Richard T Bonhomme
a52d6c5a71
Make gen_req() Always use EASYRSA_REQ_CN as intended 
All requests now have the specified commonName <FILE_NAME_BASE>

Changes:

* Separate EASYRSA_BATCH from internal SSL -batch option.
  This makes the code easier to understand.

* If both EASYRSA_BATCH and openssl_batch are unset then full
  inter-active mode is enabled.  The user can verify the input.

  Otherwise SSL interactive is disabled and no user interaction
  is required.

  In either case, all DN fields are fully populated, depending on
  EASYRSA_DN mode ('org' or 'cn_only').

Closes: #456

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-02 15:42:56 +01:00
Richard T Bonhomme
9970d626c1
Merge branch 'wiscii-remove-copy_data_to_pki' (#521) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-01 16:46:54 +01:00
Wharf in Ships Clothing
b25d74e6b7
Remove obsolete function copy_data_to_pki() 
Signed-off-by: Wharf in Ships Clothing <wiscii@protonmail.com>
 2022-04-01 16:03:52 +01:00
Richard T Bonhomme
821827028e
gitignore: Add shellcheck 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-04-01 00:16:55 +01:00
Richard T Bonhomme
0d29396070
General formatting corrections (NFC) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 23:00:47 +01:00
Richard T Bonhomme
14a29f9fca
Merge branch 'Antagonym-soft-reset' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 22:50:43 +01:00
Richard T Bonhomme
24a2b4fa77
Merge branch 'soft-reset' of ssh://github.com/Antagonym/easy-rsa into Antagonym-soft-reset 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 22:00:25 +01:00
Richard T Bonhomme
58000f777b
Merge branch 'pacija-patch-1' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 19:56:11 +01:00
Richard T Bonhomme
6759e87dd9
Merge branch 'patch-1' of ssh://github.com/pacija/easy-rsa into pacija-patch-1 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 19:54:22 +01:00
Richard T Bonhomme
7c3f41ab68
Merge branch 'TinCanTech-master' (#518) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 13:45:53 +01:00
Richard T Bonhomme
dc2da4ed45
Merge branch 'master' of /TinCanTech/easy-rsa into TinCanTech-master 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-31 13:44:29 +01:00
IPv4v6
6bdbc8ef97
Add authority information access example (#307) 2022-03-30 21:43:25 +01:00
Richard T Bonhomme
f48e7fe9e3
Archive travis.yml to easyrsa-unit-tests repository 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-30 00:32:39 +01:00
Richard T Bonhomme
b3a1d54e8c
Merge branch 'TinCanTech-master' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:50:26 +01:00
Richard T Bonhomme
ef59ea7dd9
copy_data_to_pki(): Immediate exit-with-error or 'shift' on success 
This captures any copy errors and/or clears the excess second parameter.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:38:37 +01:00
Richard T Bonhomme
4ff6b773d2
Merge branch 'TinCanTech-master' (#515) 
Add notice to 'init-pki': 'vars' file has now moved to PKI.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:08:00 +01:00
Richard T Bonhomme
7690574315
Add notice to 'init-pki': 'vars' file has now moved to PKI above 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 23:02:14 +01:00
Richard T Bonhomme
672b56b6ba
Merge branch 'mxc5178-master' 
Minor white-space and typo corrections.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 20:59:00 +01:00
Richard T Bonhomme
59cf4b50d3
Merge branch 'master' of mxc5178/easy-rsa into mxc5178-master (#67) 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 20:53:10 +01:00
Richard T Bonhomme
462f12a802
Merge branch 'TinCanTech-master' (#514) 
Improve install_data_to_pki(): Create pki/vars at 'init-pki'

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 17:39:48 +01:00
Richard T Bonhomme
d88ec8bea3
Improve install_data_to_pki(): Create pki/vars at 'init-pki' 
Bug: '$1' is not cleared, therefore 'pki/vars' was always created.

Explicitly require 'context:$1' (init-pki or vars-setup), otherwise die.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 17:30:24 +01:00
Richard T Bonhomme
606cc48874
Merge 'TinCanTech-master' - Add 'init' to install_data_to_pki() 
This will create EASYRSA_PKI/vars from example for all new PKIs.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 16:20:17 +01:00
Richard T Bonhomme
a6db7f496f
When initialising a new PKI, create "$EASYRSA_PKI/vars' from example 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 16:15:01 +01:00
Richard T Bonhomme
90b10c3514
Move 'op_test.orig' to Openvpn/easyrsa-unit-tests repository 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:57:01 +01:00
Richard T Bonhomme
615c643473
Rename unit test files 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:48:33 +01:00
Richard T Bonhomme
2b2ef5f7b8
Enable shellcheck test - Use version 0.8.0 from easyrsa-unit-tests 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 14:00:45 +01:00
Richard T Bonhomme
7510f6163c
Temporarily disable shellcheck test 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 02:06:28 +01:00
Richard T Bonhomme
7c97dcd864
Do full shellcheck test. Wrap nasty long lines. 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 01:59:15 +01:00
Richard T Bonhomme
9e109cdd7d
Hard wrap excessively long lines 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 00:38:20 +01:00
Richard T Bonhomme
0cb51cf1a1
Update ChangeLog - OpenSSL version 3 and Packaging notices 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-29 00:10:45 +01:00
Richard T Bonhomme
875dd27808
Improvements to shellcheck compliance 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:47:12 +01:00
Richard T Bonhomme
ec6d072707
Merge branch 'TinCanTech-master' 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:30:37 +01:00
Richard T Bonhomme
3f7c7df911
Merge branch 'master' of 'TinCanTech/easy-rsa' into TinCanTech-master 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 23:29:15 +01:00
Richard T Bonhomme
388aa0396e
Declare 'vars_file' without use 
This is a deliberate misuse of shellcheck: Reminder to fix PKI/vars.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 22:57:51 +01:00
Richard T Bonhomme
a8a2171716
Optimize install_data_to_pki() 
Thanks to excellent community feedback, this patch forces a single,
reliable list of sources for EasyRSA data-files.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 22:44:50 +01:00
Richard T Bonhomme
bc07187073
Change install_data_to_pki() failures to non-fatal warnings 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-28 13:40:28 +01:00
Richard T Bonhomme
80a3ad2943
vars.example: Merge branch 'Prouflon-safessl-patch' 
Change $EASYRSA_SSL_CONF to correct default value

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 17:41:22 +01:00
Richard T Bonhomme
5255d90b9a
Merge branch: 'safessl-patch' of github.com/Prouflon/easy-rsa-1 
Change '$EASYRSA_SSL_CONF' to correct default value in example file.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 17:39:34 +01:00
Richard T Bonhomme
3222d17b5e
Introduce install_data_to_pki() - Copy data-files to PKI 
The purpose here is to force EasyRSA find the required data-files:

* 'openssl-easyrsa.cnf' MUST be found.
* 'x509-types' MUST be found.
* 'vars.example' should be found.
* 'vars'
  The 'vars' file is more complicated due to user expectations.
  This patch does not copy 'vars', the code is included but DISABED.

The reasons are:

* Allow running 'easyrsa' from PATH.
* Make standard packaging work correctly.

Bug fixes:

* #499 and associated issues with missing files.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-27 14:16:32 +01:00
Richard T Bonhomme
6deae0823e
Merge branch 'TinCanTech-master' #507 
Add SSL Library version 2 to easyrsa_openssl()

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 19:04:43 +00:00
Richard T Bonhomme
ed7380bab8
Add SSL Library version 2 to easyrsa_openssl() 
Closes: #504

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 18:52:23 +00:00
Richard T Bonhomme
f08d9a3cf9
Merge: branch 'TinCanTech-master' #505 
Expand new verify_ssl_lib() to support LibreSSL version 2.x (again)

Closes: #504

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
 2022-03-25 16:10:18 +00:00