TinCanTech

> You propose to make the pki/issued directory configurable so that easyrsa can write the output directly outside of the pki directory. Exactly. However, that is not _set in stone_....

@JulienVdG I prefer your approach of the new command: `publish-cert` There are some things that I'm not keen on though..

@JulienVdG Can you explain what value there is to you by stripping the certificate text output ?

> > @JulienVdG Can you explain what value there is to you by stripping the certificate text output ? > > Some software will fail to read the certificate if...

Please, keep in mind that `strip_cert()` (Or a better name) is probably _plumbing_ not _porcelain_. It needs to be an option that could work with an existing certificate **but probably...

@dekeonus Hi `:-)` I have an alternative version to this "**publishing**" branch (To be pushed), which is only concerned with copying files to the `public` folder. The other details are...

**Draft diff**: ``` diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa index a0e5652..eafe44b 100755 --- a/easyrsa3/easyrsa +++ b/easyrsa3/easyrsa @@ -3031,6 +3031,89 @@ location: $pkcs_out" return 0 } # => export_pkcs() +# Publish a file...

> `Linux ip addr add failed: external program exited with error status: 2` This come directly from `openvpn`. The OpenVPN config file is specifically configured to use external program `ip`,...

> it looks like it gets stuck in the `while true;` loop since the subnet of my vm `10.0.0.0/8` will result in all generated pivpnNET `10.XXX.XXX.0` to be invalid... Would...

There is **no valid use case** for `10/8` as a local subnet.