renew: Disable unsupported options

Signed-off-by: Richard T Bonhomme <[email protected]>
OpenVPN · Jul 29, 2024 · 12d8fef · 12d8fef
1 parent 81256ce
commit 12d8fef
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/dev/easyrsa-tools.lib b/dev/easyrsa-tools.lib
@@ -1053,6 +1053,9 @@ subjectAltName = ${EASYRSA_SAN_CRIT}${EASYRSA_SAN}"
 		verbose "renew: --eku-crit ENABLED"
 	fi
 
+	# Disable options not supported by renew
+	unset -v EASYRSA_CP_EXTS EASYRSA_AUTO_SAN EASYRSA_NEW_SUBJECT
+
 	# confirm operation by displaying Warning
 	confirm "Continue with 'renew' ? " yes "\
 WARNING: This process is destructive!