19 Commits

Author SHA1 Message Date
Richard T Bonhomme
5255d90b9a
Merge branch: 'safessl-patch' of github.com/Prouflon/easy-rsa-1
Change '$EASYRSA_SSL_CONF' to correct default value in example file.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2022-03-27 17:39:34 +01:00
a1346054
212c18a83c
Trim excess whitespace 2021-10-21 14:21:00 +00:00
Eric F Crist
f0129cfe62
Correct formatting issue in vars.example
Closes #370

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2020-03-31 09:01:07 -05:00
root
ce858f56c5 Added ED curve support 2020-01-19 07:54:24 +01:00
Eric F Crist
c4942d9abe
Merge branch 'kdc' of https://github.com/xavierba/easy-rsa into xavierba-kdc 2020-01-11 16:02:24 -06:00
Eric F Crist
7f727b791b
Default cert expire down to 825 days
* resolves #52

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-11-25 19:17:46 -06:00
a1346054
bd4135b453
Spelling 2019-11-24 15:25:37 +00:00
Xavier Bachelot
83962ca5c4 Add support for generating KDC server certificates 2019-08-02 17:52:24 +02:00
Eric F Crist
8374fcb4da
Adding support back in for incremental serials
Not enabled by default.  Should fix #177.

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2019-05-17 06:50:08 -05:00
Luiz Angelo Daros de Luca
6ecb6f489e
use temporary directory instead of individual files
Manually managing temp files into fixes variables (EASYRSA_TEMP_FILE_*),
can result in errors like in build_ca that reused EASYRSA_TEMP_FILE_3.
A temporary directory simplify the cleanup.

A configurable directory for temp files (var EASYRSA_TEMP_DIR) also
allows the user to define a different temporary directory. This is
important for devices using flash disks that have limited number of
writes.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2019-05-02 18:26:56 -03:00
Xavier Bachelot
ff87fb1812
Make cert renew grace period configurable (default: 30 days)
Signed-off-by: Xavier Bachelot <xavier@bachelot.org>
2019-01-28 23:42:01 +01:00
Luiz Angelo Daros de Luca
edf1e92a3f update EASYRSA_CERT_EXPIRE new default value
Improves 376c62f2b81e36db6f449ac7673013075b0c3ef1

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2018-10-04 18:08:43 -03:00
Eric F Crist
e8cd6c9807 Rename config to openssl-easyrsa.cnf
This clarifies the use of the file as specific to EasyRSA while also
closing the loop on the openssl version chase.  No reason to have a
configuration file that is specific to openssl version at this point.
If the need arises, we'll do so in a sane fashion.

Resolves #159

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
2017-11-04 08:06:48 -05:00
Olav Reinert
d20d2b3c06 Update docs and examples to fit changes in 534f673 2017-07-27 08:27:27 +02:00
allo-
171834dd29 typo: Defualt 2014-09-14 17:50:14 +02:00
Josh Cepek
5758825baa Fix vars.example with proper path to extensions.temp
Related to issue #24. This does not yet resolve the vars_setup() logic
to assure unmodified variables use defaults rather than empty strings.
2014-07-27 07:19:49 -05:00
Josh Cepek
c86289ba17 Fix batch-mode handling with changes in e75ad75
The --batch CLI arg now takes no options and enables batch-mode when
present.

init-pki no longer takes a 'force' value which did the same as --batch.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-12-11 11:29:51 -06:00
Josh Cepek
cb74c35eb3 Update to ECDSA support from commit 45c27e9
Add documentation & help output; add quoting; add error messages; put
the ecparams dir under PKI dir with env-var tunable.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-24 23:37:27 -06:00
Josh Cepek
b0494ab243 Add initial 3.x codebase files
This is the initial re-write for the 3.x release series.

Signed-off-by: Josh Cepek <josh.cepek@usa.net>
2013-11-18 02:54:07 -06:00