From 12d8fef9fcb9ce0276256e150416e6a7b60d77fc Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Mon, 29 Jul 2024 22:36:10 +0100
Subject: [PATCH] renew: Disable unsupported options

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 dev/easyrsa-tools.lib | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dev/easyrsa-tools.lib b/dev/easyrsa-tools.lib
index 0a961888..0e94b00e 100644
--- a/dev/easyrsa-tools.lib
+++ b/dev/easyrsa-tools.lib
@@ -1053,6 +1053,9 @@ subjectAltName = ${EASYRSA_SAN_CRIT}${EASYRSA_SAN}"
 		verbose "renew: --eku-crit ENABLED"
 	fi
 
+	# Disable options not supported by renew
+	unset -v EASYRSA_CP_EXTS EASYRSA_AUTO_SAN EASYRSA_NEW_SUBJECT
+
 	# confirm operation by displaying Warning
 	confirm "Continue with 'renew' ? " yes "\
 WARNING: This process is destructive!