TinCanTech
TinCanTech
Re-opened but never closed ..
> I'm not a fan of the logic of using `--x509-alt` **Alternative** approaches are welcome.
Other approaches to `x509-types` are no in place. This PR is not required.
Tested on Debian10: The change above gets to build Openssl but fails at LZO. ``` make[1]: Leaving directory '/home/dik/openvpn/build/generic/tmp/openssl-1.1.1i' Build lzo configure: Configuring LZO 2.10 checking build system type... aarch64-unknown-linux-gnu...
https://github.com/libressl-portable/portable/issues/767
This is not a bug in `easyrsa` because `$OPENSSL_CNF` always points to `$EASYRSA_SAFE_CONF`. However, do **not** copy `openssl-easyrsa.cnf` to `/usr/local/etc/ssl`, unless the intention is to _bork_ LibreSSL.
Closed via Commit a3db60f229514abda9c301780dd0bdf4fb2976d1
Have you tested this yet ?
@bronger Certificates are **public** keys, so you could show us yours.
Can I also see your CA public certificate. A temporary paste service is fine.