easy-rsa icon indicating copy to clipboard operation
easy-rsa copied to clipboard

easy-rsa upgrade - documentation

Open dsommers opened this issue 5 years ago • 8 comments

We want to include the latest easy-rsa 3 release in the soon coming OpenVPN 2.5 release, where it is bundled in the Windows installer.

From a quick glance, it seems there is missing some documentation how to perform upgrade from prior easy-rsa 2 releases. A quick howto which we can include in the bundle and/or point at somewhere would be appreciated.

The OpenVPN 2.5_rc1 release is currently scheduled to Monday September 21, 2020. We can probably do that release without docs if we have a guarantee the docs will arrive in time for the final 2.5.0 release.

dsommers avatar Sep 16 '20 11:09 dsommers

https://community.openvpn.net/openvpn/wiki/easyrsa-upgrade

TinCanTech avatar Sep 16 '20 12:09 TinCanTech

I also need to push an update for v3.0.9 that either downgrades OpenSSL or fixes the bug 1.1.1g is causing. I’ll try to get to that tonight.

Eric F Crist

On Sep 16, 2020, at 6:16 AM, David Sommerseth [email protected] wrote:

We want to include the latest easy-rsa 3 release in the soon coming OpenVPN 2.5 release, where it is bundled in the Windows installer.

From a quick glance, it seems there is missing some documentation how to perform upgrade from prior easy-rsa 2 releases. A quick howto which we can include in the bundle and/or point at somewhere would be appreciated.

The OpenVPN 2.5_rc1 release is currently scheduled to Monday September 21, 2020. We can probably do that release without docs if we have a guarantee the docs will arrive in time for the final 2.5.0 release.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/OpenVPN/easy-rsa/issues/406, or unsubscribe https://github.com/notifications/unsubscribe-auth/AANXQPZGNGUDMT4PHSIVDMDSGCNAPANCNFSM4ROVJ6VA.

ecrist avatar Sep 16 '20 12:09 ecrist

@mattock Any issues with just pointing at the URL from @TinCanTech ?

dsommers avatar Sep 16 '20 12:09 dsommers

I’ve re-released the v3.0.8 packages for Windows and this appears to be working now with the older OpenSSL library and binaries.

Eric F Crist

On Sep 16, 2020, at 7:33 AM, David Sommerseth [email protected] wrote:

@mattock https://github.com/mattock Any issues with just pointing at the URL from @TinCanTech https://github.com/TinCanTech ?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/OpenVPN/easy-rsa/issues/406#issuecomment-693374458, or unsubscribe https://github.com/notifications/unsubscribe-auth/AANXQPYF7GAGVNPC4JROLH3SGCWAPANCNFSM4ROVJ6VA.

ecrist avatar Sep 16 '20 13:09 ecrist

@dsommers the link above was something i put together while working on the upgrade.

It could do with improvement, which is why it is on the wiki, so that i can edit it at will.

TinCanTech avatar Sep 16 '20 17:09 TinCanTech

@dsommers the link above was something i put together while working on the upgrade.

It could do with improvement, which is why it is on the wiki, so that i can edit it at will.

Alright, would you be willing to whip together something we can ship in the 2.5 release, based on that wiki page?

dsommers avatar Sep 16 '20 18:09 dsommers

Sorry, I would not be willing to whip together something -- I will edit the wiki as needed.

Personally, I do not believe EasyRSA-3 is entirely ready for mass deployment.

Edit: EasyRSA-3 renew is still incomplete.

Otherwise .."She rocks" mostly .. ;-)

TinCanTech avatar Sep 17 '20 02:09 TinCanTech

I can put something together in the official docs based on what is in the wiki. Give me a day or two.

ecrist avatar Sep 17 '20 03:09 ecrist