OpenVPN/easy-rsa issues and pull requests

#1192 - Signing a CSR gives strange result

Issue - State: closed - Opened by warren-gallagher 7 months ago - 3 comments

#1191 - revoke: Pass the correct certificate location to revoke function

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: BUG-FIX, ChangeLog Item, Version 3.2.1-Release

#1190 - Consider re-adding `renew` for v3.2.1 - Only v3.2.0 does not have `renew`

Issue - State: closed - Opened by TinCanTech 7 months ago
Labels: development, easyrsa-tools.lib

#1189 - Generate client certs and keys non-interactively on Windows

Issue - State: closed - Opened by alexkmbk 7 months ago - 3 comments

#1188 - Global option --eku-crit: Mark X509 extendedKeyUsage as critical

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: development

#1187 - subjectAltName should be mandatory

Issue - State: closed - Opened by lfarkas 7 months ago - 6 comments
Labels: Version 3.2.1-Release

#1186 - Understanding how to renew/revoke

Issue - State: closed - Opened by AxelJunker 7 months ago - 2 comments
Labels: question answered, renew

#1185 - TLS key system v1

Pull Request - State: closed - Opened by TinCanTech 7 months ago - 1 comment
Labels: enhancement, openvpn, ChangeLog Item, easyrsa-tools.lib, Version 3.2.1-Release

#1184 - Auto-SAN: Correct rexeg, exclude non-numeric chars by delimiting

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: improvement, Version 3.2.1-Release

#1183 - Need Guide for Upgrading 3.0.8 to 3.1.1

Issue - State: closed - Opened by khatfull 7 months ago - 1 comment
Labels: documentation, EasyRSA-23Upgrade

#1182 - sign-req: Add critical and pathlen details to confirmation dialogue

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: ChangeLog Item, improvement, Version 3.2.1-Release

#1181 - export-p12: Automatically generate inline file

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: development

#1180 - Introduce global option --auto-san, use commonName as SAN

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: enhancement, ChangeLog Item, Version 3.2.1-Release

#1179 - Introduce global option --san-crit, mark SAN critical (RFC2459)

Pull Request - State: closed - Opened by TinCanTech 7 months ago
Labels: enhancement, ChangeLog Item, Version 3.2.1-Release

#1178 - `gen-req` overwrites an existing request without confirmation

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG

#1177 - Command revoke: Do not remove duplicate certificate by serial

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG-FIX, ChangeLog Item, improvement, Version 3.2.1-Release

#1176 - Introduce new global options: --ku-crit and --bc-crit

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: enhancement, ChangeLog Item, Version 3.2.1-Release

#1175 - Update README.md. Add release link

Pull Request - State: closed - Opened by Jakobovski 8 months ago

#1174 - Command revoke: Add confirmation for possible misuse

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: improvement, Version 3.2.1-Release

#1173 - Command revoke: Add abbreviations for optional 'reason'

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: enhancement, ChangeLog Item, Version 3.2.1-Release

#1172 - Command `revoke` must not move key and request files

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG, Version 3.2.0-Release

#1171 - one location

Issue - State: closed - Opened by lerlar 8 months ago - 1 comment
Labels: unclassified

#1170 - Command gen-req: Re-enable global option --req-cn - Includes build_full()

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: Major Changes, ChangeLog Item, Version 3.2.1-Release

#1169 - Fix minor typos

Pull Request - State: closed - Opened by NathanBaulch 8 months ago - 1 comment
Labels: Maintenance, Version 3.2.1-Release

#1168 - Allow use of option '--req-cn' with command 'gen-req'

Pull Request - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: development

#1167 - Use of `revoke` when `revoke-expired` is intended

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG, Version 3.2.0-Release

#1166 - display_dn(): Remove excess subshell

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: improvement, Version 3.2.1-Release

#1165 - Introduce write_legacy_file_v2()

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: enhancement, ChangeLog Item, Version 3.2.1-Release

#1164 - Command `write`: Allow to specify target file instead of directory

Issue - State: closed - Opened by TinCanTech 8 months ago

#1163 - Introduce Global Safe SSL config and Local SSL config

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: enhancement, EasyRSA-OpenSSL-Config, BUG-FIX, easyrsa-tools.lib, Version 3.2.1-Release

#1162 - `sign-req`: `--cop-ext` is removed by `--force-safe-ssl`

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG, Version 3.2.0-Release

#1161 - Force display_dn() and verify_file() to work without $OPENSSL_CONF

Pull Request - State: closed - Opened by TinCanTech 8 months ago - 2 comments

#1160 - `display_dn()`: Remove unnecessary subshell

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: improvement, Version 3.2.1-Release

#1159 - Windows 7: `gen-crl` always prompts for over-write

Issue - State: open - Opened by TinCanTech 8 months ago
Labels: windows, Bug Minor

#1158 - Outline use and expansion of `openssl-easyrsa.cnf`

Issue - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: LibreSSL, documentation, EasyRSA-OpenSSL-Config, improvement, Version 3.2.1-Release

#1157 - easyrsa_mktemp(): Make variable names more unique to avoid conflicts

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: improvement, Version 3.2.1-Release

#1156 - Tools lib call ssl direct

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: improvement, easyrsa-tools.lib, Version 3.2.1-Release

#1155 - Importing the CA certificates for OpenVPN clients and internal domains.

Issue - State: closed - Opened by kaushalshriyan 8 months ago - 1 comment
Labels: invalid

#1154 - Move SSL config file creation and/or expansion to `write_easyrsa_ssl_cnf_tmp()`

Pull Request - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: development

#1153 - easyrsa-tools.lib: Add 'locate_support-files' to recreate temp-session

Pull Request - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG-FIX, easyrsa-tools.lib, Version 3.2.1-Release

#1152 - UT failure from `easyrsa-tools.lib` for command `show-expire`

Issue - State: closed - Opened by TinCanTech 8 months ago
Labels: BUG, easyrsa-tools.lib, unit-test

#1151 - Unit-test: Add Old expansion test on nix (EASYRSA_FORCE_SAFE_SSL)

Pull Request - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: Version 3.2.1-Release, unit-test

#1150 - easyrsa_openssl(): Always export $OPENSSL_CONF as $EASYRSA_SSL_CONF

Pull Request - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: BUG-FIX, Version 3.2.1-Release

#1149 - LibreSSL: `build-*-full` uses an incorrect SSL config file

Issue - State: closed - Opened by TinCanTech 8 months ago - 1 comment
Labels: BUG, LibreSSL, Version 3.2.0-Release

#1148 - EasyRSA Behavior Change - 3.0.8 - 3.2.0 - EASYRSA_REQ_CN / --req-cn /--subject-alt-name

Issue - State: closed - Opened by joubertdj 9 months ago - 44 comments
Labels: discussion, question answered

#1147 - Remove obsolete 'sed' expansion of openssl-easyrsa.cnf

Pull Request - State: closed - Opened by TinCanTech 9 months ago - 1 comment
Labels: easyrsa-tools.lib

#1146 - mandatory SAN

Issue - State: closed - Opened by nimbius 9 months ago - 16 comments
Labels: documentation, discussion, Feature request

#1145 - easyrsa_mkdir(): Remove use of 'mkdir -p', use only 'mkdir'

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: improvement, Windows 11, Version 3.2.1-Release

#1144 - `dev/easyrsa-tools.lib` missing in release build

Issue - State: closed - Opened by freddebacker 9 months ago - 6 comments
Labels: question answered, Version 3.2.0-Release, easyrsa-tools.lib, Version 3.2.1-Release

#1143 - Revert changes made for Windows 10/11 `mkdir -p` failure

Issue - State: closed - Opened by TinCanTech 9 months ago
Labels: Windows 11, Version 3.2.1-Release

#1142 - Use standard indentation rules for 'case'

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: improvement, Version 3.2.1-Release

#1141 - sign-req: Improve confirmation details

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: improvement, Version 3.2.0-Release

#1140 - Minor corrections and improvements

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: improvement, Version 3.2.0-Release

#1139 - Add CA certificate to expiry report `show-expire`

Issue - State: closed - Opened by TinCanTech 9 months ago
Labels: enhancement

#1138 - LibreSSL: Ignore and discard missing config file warning

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: improvement, Version 3.2.0-Release

#1137 - Revert ca76697: Remove escape_hazard()

Pull Request - State: closed - Opened by TinCanTech 9 months ago
Labels: BUG-FIX, ChangeLog Item, Version 3.2.0-Release

#1136 - Revert ca76697: Remove escape_hazard()

Issue - State: closed - Opened by TinCanTech 9 months ago
Labels: ChangeLog Item, Regression, Version 3.2.0-Release

#1135 - self-sign: Adjust 'X509v3 Key Usage'

Pull Request - State: closed - Opened by TinCanTech 9 months ago - 1 comment
Labels: X509-types, ChangeLog Item, improvement

#1134 - self-sign: Improve default algorithm and curve selection

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement, Version 3.2.0-Release

#1133 - [SECURITY] Possible Code Injection Issue

Issue - State: closed - Opened by jmrcsnchz 10 months ago - 6 comments

#1132 - Remove `OPENSSL_CONF=/dev/null`

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement

#1131 - Fully integrate self-signed certificates

Issue - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: enhancement

#1130 - Typo in 'verify-cert' output

Issue - State: closed - Opened by gcorrall 10 months ago - 1 comment
Labels: improvement, Version 3.2.0-Release

#1129 - Add self-signed certificates to status reports

Issue - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: Feature request

#1128 - Command inline: Support self-signed certificate called from cmd-line

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: BUG-FIX, Version 3.2.0-Release

#1127 - Introduce commands: self-sign-server and self-sign-client

Pull Request - State: closed - Opened by TinCanTech 10 months ago - 2 comments
Labels: enhancement, ChangeLog Item, Version 3.2.0-Release

#1126 - Remove variable 'makesafeconf' as obsolete

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement, Version 3.2.0-Release

#1125 - Improve ssl_cert_x509v3_eku()

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement, Version 3.2.0-Release

#1124 - build-ca: Command 'req', remove SSL option '-keyout'

Pull Request - State: closed - Opened by TinCanTech 10 months ago - 2 comments
Labels: BUG-FIX, Version 3.1.8

#1123 - build-ca: Command 'req', remove SSL option '-keyout'

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: BUG-FIX, ChangeLog Item, Version 3.2.0-Release

#1122 - CA Private Key will be encrypted with des-ede3-cbc during build-ca with OpenSSL 3.x

Issue - State: open - Opened by lysiszegerman 10 months ago - 8 comments
Labels: BUG, Solution applied, discussion, Sticky, Version 3.1.7

#1121 - Possible candidates for `easyrsa-tools.lib`

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: openvpn, Feature request, improvement, easyrsa-tools.lib

#1120 - Resolve SSL human readable text of certs/reqs for EasyRSA

Issue - State: open - Opened by TinCanTech 10 months ago
Labels: enhancement

#1119 - Remove command 'init-pki', option 'soft', undefined usage

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: undecided, ChangeLog Item, improvement

#1118 - Remove `init-pki soft`, badly defined

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement

#1117 - Remove 'sed' expansion of 'openssl-easyrsa.cnf'

Pull Request - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: ChangeLog Item, improvement

#1116 - Remove `$EASYRSA_LEGACY_SAFE_SSL` and relevant code

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: wontfix

#1115 - Remove escape_hazard()

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: ChangeLog Item, improvement, Version 3.2.0-Release

#1114 - Remove command and function display_cn(), unused

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: ChangeLog Item, improvement, Version 3.2.0-Release

#1113 - Abandon `display_cn()` Unused

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement

#1112 - Status reports: Abandon command `show-renew`

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement

#1111 - Add an option to change the subject when signing a request. `V2`

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: enhancement, Community reveiwed, Version 3.2.0-Release

#1110 - Error using --startdate/--enddate

Issue - State: closed - Opened by nobody-important-23 10 months ago - 2 comments
Labels: duplicate, Version 3.1.7

#1109 - Revoke keep request

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: Full-Approval, Major Changes, ChangeLog Item, Version 3.2.0-Release

#1108 - Remove ALL `renew` commands

Issue - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: Major Changes, improvement, Version 3.2.0-Release

#1107 - Review `# comments` in code

Issue - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement

#1106 - easyrsa_mkdir_p(): Ignore 'mkdir.exe' error code in favor of 'test'

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: improvement, Version 3.2.0-Release

#1105 - Shellcheck directives and minor tweak

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: shellcheck, Version 3.2.0-Release

#1104 - Add `easyrsa-tool.lib` to CI

Issue - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: shellcheck

#1103 - Move all renew code to easyrsa-tools.lib

Pull Request - State: closed - Opened by TinCanTech 10 months ago - 2 comments
Labels: discussion, easyrsa-tools.lib

#1102 - Move all renew code to `easyrsa-tools.lib`

Issue - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: development, improvement, easyrsa-tools.lib

#1101 - New function easyrsa_mkdir_p(): Replace use of 'mkdir -p'

Pull Request - State: closed - Opened by TinCanTech 10 months ago
Labels: windows, BUG-FIX, Version 3.2.0-Release, Windows 11

#1100 - Replace 'mkdir -p' with individual 'mkdir' calls

Pull Request - State: closed - Opened by TinCanTech 10 months ago - 1 comment
Labels: windows, BUG-FIX, Windows 11

#1099 - Add equivalent of `--req-*` but for `sign-req`.

Issue - State: closed - Opened by agowa 10 months ago - 3 comments

#1098 - Restrict use of --req-cn to build-ca

Pull Request - State: closed - Opened by TinCanTech 11 months ago
Labels: BUG-FIX, ChangeLog Item, Version 3.2.0-Release

#1097 - Command `renew`: Move current `req/crt/key` files after `renew` has succeeded

Issue - State: closed - Opened by TinCanTech 11 months ago
Labels: maybe-someday, improvement

#1096 - Separate SAN from DN - Refactor display_dn()

Pull Request - State: closed - Opened by TinCanTech 11 months ago - 2 comments
Labels: enhancement, BUG-FIX, ChangeLog Item, Version 3.2.0-Release

#1095 - Any magic about the 64 bytes common-name length limit

Issue - State: closed - Opened by ihipop 11 months ago - 9 comments
Labels: EasyRSA-OpenSSL-Config

#1094 - Global option `--copy-ext` is not included in UT

Issue - State: closed - Opened by TinCanTech 11 months ago - 1 comment

#1093 - Subject-Alt-Name: Correct behavior of global option --san

Pull Request - State: closed - Opened by TinCanTech 11 months ago - 3 comments
Labels: enhancement, BUG-FIX, ChangeLog Item

GitHub / OpenVPN/easy-rsa issues and pull requests