TinCanTech

Introduce: x509-alt-types (folder) and '--x509-alt' option

5

'x509-alt-types' allows EasyRSA to maintain some core x509-types and allow for much more relaxed rules regarding alternatives. This allows for changes in RFC specification for X509 to be incorporated in...

LibreSSL does not return version when an incompatible config file can be found

2

Required: ``` verify_ssl_lib() { if [ -z "$EASYRSA_SSL_OK" ]; then save_OPENSSL_CONF="$OPENSSL_CONF" unset OPENSSL_CONF # redirect std-err to ignore missing etc/ssl/openssl.cnf file "$EASYRSA_OPENSSL" version val="$("$EASYRSA_OPENSSL" version 2>/dev/null)" || die "\ SSL...

'init-pki' should be mutually exclusive to '--vars'

3

The **_Classical_** way to use `easyrsa`, is to have all the necessary supporting data to be present in the current working directory. Necessary supporting data [NSD]: - **`easyrsa` script** file....

Incorrect SAN is selected for a server named '555.1.1.1'

11

`default_server_san()` mistakes a `commonName` for an IP address when the CN "looks like" an IP address. **Example**: Input: ``` easyrsa build-server-full 1.2.3.4 nopass ``` Result: ``` Certificate: Data: Version: 3...

**`easyrsa` warns with the error: `Failed to install required data-files to PKI`** This is howto fix-it: - Copy `openssl-easyrsa.cnf` **file** to your PKI folder. - Copy `x509-types` **folder** to your...

Running easyrsa from a symlink or PATH

20

This issue is here to discuss how to simplify and resolve the problems related to: - _where `easyrsa` is located_ **verses** - _the current directory_, where `easyrsa` was called. When...

[New Feature] Easy-TLS utility

3

Please see: https://github.com/TinCanTech/easy-tls **Easy-TLS** An Easy-RSA extension utility to help manage Easy-RSA based x509 security credentials **combined with** OpenVPN specific TLS keys. Testing and feedback welcome.

OpenVPNMSICA: get_net_adapter_guid: querying 'netCfgInstanceId' registry value failed. Error 2: Can't find the file

17

Ref: https://forums.openvpn.net/viewtopic.php?f=5&t=31232 This _feels_ like the right place to make a report.

Windows NSIS installer and Easy-RSA 3

2

I recently had to build Openvpn for Windows and I use NSIS because there are less dependencies. Unfortunately, this still only packages Easy-RSA v2. Are there plans to upgrade this...

Building 2.6_git for Windows with NSIS fails for openvpn.8.html

4

I presume this is related to the new manual parts. Log: ``` Packing images Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/libopenvpnmsica.dll Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/libcrypto-1_1-x64.dll Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/libssl-1_1-x64.dll Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/openvpn.exe Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/lz4c.exe Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/unlz4.exe Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/lz4.exe Signing /home/tct/openvpn/build-system/ovpn-build-new/windows-nsis/tmp/image-x86_64/openvpn/bin/openssl.exe...