v3.2.0-beta1
#1046
Merged
v3.2.0-beta1
#1046
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Usage: 'easyrsa rand <decimal_number>' Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
d055ad7
to
6131cbf
Compare
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Place selecting and sourcing vars-file before assigning PKI and CA requirements to the command to be executed. This is more logical because the command requirements are assigned directly before handing off to the requested command, while external variables have already been assigned. Move 'make-vars' to the standard 'case' command selection list. Signed-off-by: Richard T Bonhomme <[email protected]>
Replace use of copy_data_to_pki(), which copies an existing file to the PKI, by verifying that EASYRSA_SSL_CONF points to a file or create a temp-file to be used in place. This allows removing openssl-easyrsa.cnf file from the repository. Signed-off-by: Richard T Bonhomme <[email protected]>
locate_support_files() will find the support files and assign variables accordingly: * openssl_easyrsa.cnf - Assigned to EASYRSA_SSL_CONF * /x509-types - Assigned to EASYRSA_EXT_DIR If the files are not found then no variables are assigned and the files are created seprately as temp-files, when required. Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
This is necessary for status reports read_db(), which recreates the secure session for each record. Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
This allows creating all support files.
Usage: 'easyrsa write <type> <DIR>'
* <type> must be specified.
* <DIR> is optional. If specified then files are created.
Otherwise, data is sent to stdout.
Types:
* ssl-cnf - Write openssl-easyrsa.cnf file.
* COMMON|ca|server|serverCleint|client|codeSigning|email|kdc
- Write x509-type <type> file.
* lecacy - Write ALL files above to <DIR>.
Default <DIR> is EASYRSA_PKI or EASYRSA.
Will create <DIR>/x509-types directory.
* safe-ssl - Expand Easy-RSA SSL config for LibreSSL.
* vars - Write vars.example file.
Replaces command 'make-safe-ssl' and 'make-vars'.
Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
f2b6503
to
c814e0a
Compare
Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
7389b9b
to
058d3eb
Compare
Signed-off-by: Richard T Bonhomme <[email protected]>
New section 'Advanced configuration files' gives further details on how to use command 'write'. Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
396d024
to
468a9e0
Compare
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
c705e4c
to
50c3c87
Compare
Signed-off-by: Richard T Bonhomme <[email protected]>
TinCanTech
force-pushed
the
v3.2.0-beta1
branch
from
50c3c87
to
784ad81
Compare
In default mode, build-ca exports the CA password to the environment, via function force_set_var(). Replace use of force_set_var() with a here-doc. Also, make verbose openssl command output debug only. Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Command 'write' requires a PKI for 'legacy' and 'safe-ssl'. Signed-off-by: Richard T Bonhomme <[email protected]>
Signed-off-by: Richard T Bonhomme <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The essential change here is to make all support file redundant; If they are not found then they are created on demand.
Currently does not work forx509-types/emailandkdcThe most significant change is new command
write <type> <DIR>c814e0a