From bd5a68c5f1e7be19b79f3c09db1bd4a53f4fa257 Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Mon, 29 Jul 2024 22:31:26 +0100
Subject: [PATCH] renew: Disable unsupported options

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 dev/easyrsa-tools.lib | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dev/easyrsa-tools.lib b/dev/easyrsa-tools.lib
index 0a961888..a62e42b7 100644
--- a/dev/easyrsa-tools.lib
+++ b/dev/easyrsa-tools.lib
@@ -1053,6 +1053,9 @@ subjectAltName = ${EASYRSA_SAN_CRIT}${EASYRSA_SAN}"
 		verbose "renew: --eku-crit ENABLED"
 	fi
 
+	# Disable options not supported by renew
+	unset -v EASYRSA_CP_EXTS EASYRSA_AUTO_SAN
+
 	# confirm operation by displaying Warning
 	confirm "Continue with 'renew' ? " yes "\
 WARNING: This process is destructive!