Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

V321 final touches #1221

Merged
merged 14 commits into from
Sep 5, 2024
Merged

V321 final touches #1221

merged 14 commits into from
Sep 5, 2024

Conversation

TinCanTech
Copy link
Collaborator

No description provided.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
secure_session(): Use short-circuit and unset variables consistently

easyrsa_mktemp(): Minor improvements.
Set $EASYRSA_MAX_TEMP to 1, now that subshell abuse has been irradicated.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
If Easy-RSA is used by a client only then that client must not generate
their own TLS key.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Copy link
Collaborator Author

TinCanTech commented Sep 4, 2024

LibreSSL test completed:

easyrsa-unit-tests.sh version: 3.2.1
easyrsa-unit-tests.sh source:  
easyrsa source:                easyrsa

* EASYRSA_OPENSSL:
  /home/tct/libressl/libressl-3.8.2/apps/openssl/openssl (env)
  LibreSSL 3.8.2

* Use Passwords!

ERSA_BIN = 'easyrsa'
EasyRSA Version Information
Version:     ~VER~
Generated:   ~DATE~
SSL Lib:     LibreSSL 3.8.2
Git Commit:  ~GITHEAD~
Source Repo: https://github.com/OpenVPN/easy-rsa


Unit-test: cleanup
Saving temp dir: /home/tct/git/easy-rsa/test/installed/easyrsa3/unit tests
Completed Wed  4 Sep 02:41:13 BST 2024 (Total errors: 0)

The Salt Must Flow.

Add detailed instructions for TLS Key re-use.
Add confirmation for TLS Key re-use.

init-pki soft: Correct TLS Key file hash value.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
…nopass)

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech TinCanTech merged commit a8e7efc into OpenVPN:master Sep 5, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant