The default vars file problem

[TinCanTech]

The problem with vars is that it allows setting EASYRSA.

This is a simple problem of authority, who is in charge ?

The solution is simple:

• EASYRSA default IS $PWD
• vars default MUST, therefore, be $PWD/vars

All other vars can be ignored, unless user specified.

The problem of authority is resolved by putting $PWD in charge of defaults.

---

As an easy to understand example of the problem, consider that:

# Set EASYRSA_VARS_FILE to your preferred vars file
set_var EASYRSA_VARS_FILE "$The_Moon"

is set inside the vars file.

[TinCanTech]

For version 3.1.x, easyrsa can still search for duplicates and issue a warning, instead of the current error.

The vars file in use is already shown to the user.

[TinCanTech]

Reminder: Remove init-pki soft.

[TinCanTech]

User confirmation confirm() seems less heavy handed than forbidden.

[TinCanTech]

Follow-up: #1027