easy-rsa 3.2.0 #172053
Merged
easy-rsa 3.2.0 #172053
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
the
bump-formula-pr
chenrui333
approved these changes
May 18, 2024
|
🤖 An automated task has requested bottles to be published to this PR. |
github-actions
bot
added
the
CI-published-bottle-commits
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Created by
brew bumpCreated with
brew bump-formula-pr.release notes
* Revert ca76697: Restore escape_hazard() (b1e9d7a) (#1137) * New X509 Type: 'selfsign' Internal only (999533e) (#1135) * New commands: self-sign-server and self-sign-client (9f8a1d1) (#1127) * build-ca: Command 'req', remove SSL option '-keyout' (4e02c8a) (#1123) * Remove escape_hazard(), obsolete (ca76697) * Remove command and function display_cn(), unused (be8f400) (#1114) * Introduce Options to edit Request Subject during command 'sign-req' Global Option: --new-subject -- Command 'sign-req' option: 'newsubj' First proposed in: (#439) -- Completed: (83b81c7) (#1111) * docs: Update EasyRSA-Renew-and-Revoke.md (f6c2bf5) (#1109) * Remove all 'renew' code; replaced by 'expire' code (9d94207) (#1109) * Introduce commands: 'expire' and 'revoke-expired' (a1890fa) (#1109) * Keep request files [CSR] when revoking certificates (6d6e8d8) (#1109) * Restrict use of --req-cn to build-ca (0a46164) (#1098) * Remove command 'display-san' (Code removed in 5a06f94) (50e6002) (#1096) * help: Add 'copyext'; How to use --copy-ext and --san (5a06f94) (#1096) * Allow --san to be used multiple times (5a06f94) (#1096) * Remove default server subject alternative name (0b85a5d) (#576) * Move Status Reports to 'easyrsa-tools.lib' (214b909) (#1080) * export-p12, OpenSSL v1.x: Upgrade PBE and MAC options (60a508a) (#1084 - Based on #1081) * Windows: Introduce 'Non-Admin' mode (c2823c4) (#1073) * LibreSSL: Add fix for missing 'x509' option '-ext' (96dd959) (#1068) * Variable heredoc expansion for SSL/Safe Config file (9c5d423) (#1064)Branch-merge: v3.2.0-beta2 (#1055) 2024/01/13 Commit: d51d79b
Only use here-doc if the current version is recognised by sha256 hash.
The current file is NEVER deleted (60216d5). Partially revert: 2a8c0de
Fallback to encryption algorithm RC2_CBC or 3DES_CBC
Branch-merge: v3.2.0-beta1 (#1046) 2023/12/15 Commit: 7120876
Important note: As of Easy-RSA version 3.2.0-beta1, the configuration files
vars.example,openssl-eayrsa.cnfand all files inx509-typesdirectoryare no longer required. Package maintainers can omit these files in the future.
All files are created as required and deleted upon command completion.
vars.exampleis created duringinit-pkiand placed in the fresh PKI.These files will be retained for downstream packaging compatibility.
Rename X509-type file
code-signingtocodeSigning(1c6b31a)The original file will be retained as
code-signing, however, the automaticX509-types creation will name the file
codeSigning. This effectively meansthat both are valid X509-types, until
code-signingis dropped.init-pki: Always write vars.example file to fresh PKI (66a8f3e)
New command 'write': Write 'legacy' files to stdout or files (c814e0a)
Remove command 'make-safe-ssl': Replaced by command 'write safe-cnf' (c814e0a)
New Command 'rand': Expose easyrsa_random() to the command line (6131cbf)
Remove function 'set_pass_legacy()' (7470c2a)
Remove command 'rewind-renew' (72b4079)
Remove command 'rebuild' (d6953cc)
Remove command 'upgrade' (6a88edd)
Branch-merge: v3.2.0-alpha2 (#1043) 2023/12/7 Commit: ed0dc46
Branch-merge: v3.2.0-alpha1 (#1041) 2023/12/2 Commit: 42c2e95
What's Changed
x509-ekuv2by @TinCanTech in Command:x509-ekuv2OpenVPN/easy-rsa#1039v3.2.0-alpha1by @TinCanTech inv3.2.0-alpha1OpenVPN/easy-rsa#1041v3.2.0-alpha2by @TinCanTech inv3.2.0-alpha2OpenVPN/easy-rsa#1043v3.2.0-Remove-commandsby @TinCanTech inv3.2.0-Remove-commandsOpenVPN/easy-rsa#1045v3.2.0-beta1by @TinCanTech inv3.2.0-beta1OpenVPN/easy-rsa#1046v3.2.0-beta2by @TinCanTech inv3.2.0-beta2OpenVPN/easy-rsa#1055sedwithheredocexpansion by @TinCanTech in Replace use ofsedwithheredocexpansion OpenVPN/easy-rsa#1064V2by @TinCanTech in Add an option to change the subject when signing a request.V2OpenVPN/easy-rsa#1111New Contributors
Full Changelog: OpenVPN/easy-rsa@v3.1.7...v3.2.0