easy-rsa
easy-rsa copied to clipboard
OpenVPN
easy-rsa - Simple shell based CA utility
I am the Debian maintainer for easy-rsa. While building the latest release, I received the following output: ``` dpkg-source: info: using source format '3.0 (quilt)' dpkg-source: info: verifying ./easy-rsa_3.1.5.orig.tar.gz.asc gpgv:...
Passphrases and automation .. it is a conundrum. However, it would be useful if EasyRSA had some documentation on how it is done here .. Options: `--passin=something` and `--passout=something`. FTR:...
This allows a new CA to sign certificates "in the field".
Ref: #409 Not strictly `POSIX`. And not at all Windows. Follow-up: #561
#1073, #1075 and more.. Improve the safe-guard made here: https://github.com/OpenVPN/easy-rsa/blob/f92ca403ac9ac3e9522d0caca513cd3b314efc8c/distro/windows/bin/easyrsa-shell-init.sh#L111-L124 If Windows does not work then there is no point going further than here. Revert: - https://github.com/OpenVPN/easy-rsa/commit/14ffb55115cf67632d19ef37257338a5b1f2cffc
With certain exceptions, e.g. 'help', use standard indentation rules for shell-command 'case'. (Use 'git diff -w' for a clean summary)
Until there is a POC to define the point to a `soft` init, this is history.
A `soft` option infers that there is history to a PKI. Command `init-pki` _specifically_ **destroys** ALL history. While there may be obscure reasons to preserve history, preserving `vars` is better...