easy-rsa icon indicating copy to clipboard operation
easy-rsa copied to clipboard

easy-rsa - Simple shell based CA utility

Results 113 easy-rsa issues
Sort by recently updated
recently updated
newest added

There's no reason to fail if the directory exists, but is empty. experienced with 2.2.2-1 on Ubuntu 15.04

Version 2.x

When verifying the `3.1.1` release archive, I get the following: ``` I:\>gpg --recv-keys C8FCA3E7F787072CDEB91D2F72964219390D0D0E gpg: C:\\Users\\Ferdinand\\AppData\\Roaming\\gnupg\\trustdb.gpg: trustdb created gpg: key F8489F839D7367F3: public key "Eric F Crist " imported gpg: Total...

When I execute command `./easyrsa3/easyrsa` I got `bash: ./easyrsa3/easyrsa: /bin/sh^M: bad interpreter: No such file or directory` running under WSL2 (ubuntu wsl2 windows 11) It works normal under MacOS

not-easyrsa
WSL (Unsupported)

Bug in the latest v3.1.1 release: ``` ./easyrsa --batch build-ca Easy-RSA error: The copy of openssl-easyrsa.cnf in use does not support X509-type 'ca'. * /etc/openvpn/server/easy-rsa/pki/openssl-easyrsa.cnf Please update openssl-easyrsa.cnf to the...

BUG
packaging
OpenSSL-Config
Version 3.1.x

Option `-v|--verbose` only works with `show-expire` and `show-renew`. It is only meant as a way to verify that: [ "$db_serial" = "$cert_serial" ] || return 0 is valid. Even though...

documentation
Version 3.1.x

`man 8 openvpn`: When using the inline file feature with `--pkcs12` the inline file has to be `base64` encoded. Encoding of a `.p12` file into `base64` can be done, for...

low hanging fruit
PKCS
Feature request

`${ENV::EASYRSA_KDC_REALM}` is used in `x509-types/kdc` but is not expanded by `easyrsa_openssl()`. This is true of versions All versions, that I can ascertain. Original PR #322 does not appear to cover...

BUG
wontfix
LibreSSL
Major-Changes-v3.1.x
Version 3.1.x

https://github.com/OpenVPN/easy-rsa/blob/72cfbd2cd026ee2b5c92afa2ef2d65e301c51e8f/easyrsa3/easyrsa#L1165-L1173 Should be: ``` # Find and copy data-files, in specific order for area in \ "$PWD" \ /usr/local/share/easy-rsa \ /usr/share/easy-rsa \ /etc/easy-rsa \ "${0%/*}" \ # EOL do ```...

packaging
improvement
Version 3.1.x

On `SIGINT`, `easyrsa` simply exits with code `1`. According to some documentation[1], this is the wrong way to handle `SIGINT` because the calling process cannot determine if `easyrsa` received `SIGINT`....

development
improvement
Version 3.1.x
POSIX