openvpn-build icon indicating copy to clipboard operation
openvpn-build copied to clipboard
verified publisher icon OpenVPN

chore(deps): update dependency openvpn/easy-rsa to v3.2.0 (release/2.6)

Open openvpn-inc-ci opened this issue 1 year ago • 0 comments

This PR contains the following updates:

Package Update Change
OpenVPN/easy-rsa minor 3.1.7 -> 3.2.0

Release Notes

OpenVPN/easy-rsa (OpenVPN/easy-rsa)

v3.2.0: 3.2.0

Compare Source

NOTICE: EasyRSA version 3.2.0 should be considered as a development snapshot.

EasyRSA v3.2.0 - Most significant changes

New commands:

  • self-sign-server and self-sign-client (#​1127) Create self-signed certificates for use with OpenVPN Peer Fingerprint mode. These certificates comply with other EasyRSA signing policies.

  • expire (#​1109) Selectively move certificates from the issued/ to expired/ directory. This allows a new certificate to be signed from the original signing request file. This allows all custom signing options to be applied as required. This replaces the old command renew, which has been removed. Further details: doc/EasyRSA-Renew-and-Revoke.md

  • write (Commit: c814e0a) Create legacy support files: openssl-easyrsa.cnf, x509-types/* and vars.example. This allows EasyRSA to be used without having copies of the support files installed.

Removed commands:

  • renew (#​1109) Replaced by command expire, followed by command sign-req. This allows all custom options to be used when signing, which renew did not.

  • rebuild (Commit: d6953cc) and rewind-renew (Commit: 72b4079) No longer required.

  • upgrade (Commit: 6a88edd) No longer supported.

New Global Option:

  • --new-subject -- Command sign-req option: newsubj (#​1111) Edit Request Subject during command sign-req

New files:

  • easyrsa-tools.lib (Commit: 214b909) Moved code for commands show-expire, show-revoke and show-renew to the new file. easyrsa-tools.lib is auto-loaded, if it is found in a supported location. eg. $pwd

Branch-merge: v3.2.0-beta2 (#​1055) 2024/01/13 Commit: d51d79b

  • Always use here-doc version of openssl-easyrsa.cnf (2a8c0de) Only use here-doc if the current version is recognised by sha256 hash. The current file is NEVER deleted (60216d5). Partially revert: 2a8c0de
  • export-p12: New command option 'legacy'. OpenSSL V3 Only (f8514de) Fallback to encryption algorithm RC2_CBC or 3DES_CBC
  • export-p12: Always set 'friendlyName' to file-name-base (da9e594)
  • Update OpenSSL to 3.2.0 (03e4829)

Branch-merge: v3.2.0-beta1 (#​1046) 2023/12/15 Commit: 7120876

  • Important note: As of Easy-RSA version 3.2.0-beta1, the configuration files vars.example, openssl-eayrsa.cnf and all files in x509-types directory are no longer required. Package maintainers can omit these files in the future. All files are created as required and deleted upon command completion. vars.example is created during init-pki and placed in the fresh PKI. These files will be retained for downstream packaging compatibility.

  • Rename X509-type file code-signing to codeSigning (1c6b31a) The original file will be retained as code-signing, however, the automatic X509-types creation will name the file codeSigning. This effectively means that both are valid X509-types, until code-signing is dropped.

  • init-pki: Always write vars.example file to fresh PKI (66a8f3e)

  • New command 'write': Write 'legacy' files to stdout or files (c814e0a)

  • Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf' (c814e0a)

  • New Command 'rand': Expose easyrsa_random() to the command line (6131cbf)

  • Remove function 'set_pass_legacy()' (7470c2a)

  • Remove command 'rewind-renew' (72b4079)

  • Remove command 'rebuild' (d6953cc)

  • Remove command 'upgrade' (6a88edd)

Branch-merge: v3.2.0-alpha2 (#​1043) 2023/12/7 Commit: ed0dc46

  • Remove EASYRSA_NO_VARS; Allow graceful use without a vars file (3c0ca17)

Branch-merge: v3.2.0-alpha1 (#​1041) 2023/12/2 Commit: 42c2e95

  • New diagnostic command 'display-cn' (#​1040)
  • Expand renewable certificate types to include code-signing (#​1039)

What's Changed

New Contributors

Full Changelog: https://github.com/OpenVPN/easy-rsa/compare/v3.1.7...v3.2.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

openvpn-inc-ci avatar May 18 '24 12:05 openvpn-inc-ci