easy-rsa - Simple shell based CA utility
Go to file
Richard T Bonhomme 104b44cfca
Merge branch 'TinCanTech-show-expire-allow-zero-days'
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
2024-11-11 22:28:31 +00:00
.github/workflows Unit-test: Add Old expansion test on nix 2024-05-29 02:45:22 +01:00
build Release v3.1.5 2023-06-10 09:01:27 -05:00
dev easyrsa-tools.lib, show-expire: Use $openssl_v3 flag to choose SSL lib 2024-11-11 22:18:14 +00:00
distro Windows, easyrsa-shell-init.sh: Add prompts to 'read' before errors 2024-09-03 20:28:08 +01:00
doc doc: Revoke and Renew, update for Easy-RSA v3.2.1 - Partial renew CA 2024-08-30 19:22:56 +01:00
easyrsa3 show-expire: Allow --days to be zero 2024-11-10 19:34:31 +00:00
Licensing Use hash-identical license file from gnu.org 2021-10-21 13:58:12 +00:00
release-keys Update README.md 2021-05-09 20:10:31 -05:00
.gitignore Ignore unit-test sand-box 2022-05-30 18:58:03 +01:00
ChangeLog ChangeLog: easyrsa-tools.lib: show-expire, allow --days to be zero 2024-11-10 20:02:25 +00:00
COPYING.md Convert README and COPYING into markdown files 2016-06-22 19:02:23 +03:00
KNOWN_ISSUES KNOWN_ISSUES: Add Windows 11 issues 2024-05-23 23:06:38 +01:00
op-test.sh Add dev/easyrsa-tools.lib to unit-test as a shellcheck target 2024-04-04 23:55:22 +01:00
README.md Update support options 2024-09-14 03:27:39 +01:00
README.quickstart.md set line width to 80 2017-10-09 15:57:02 -07:00
wop-test.bat Rename unit test files 2022-03-29 14:48:33 +01:00
wop-test.sh Use full '--passin'/'--passout' unit tests 2022-05-13 23:25:40 +01:00

CI

Overview

easy-rsa is a CLI utility to build and manage a PKI CA. In layman's terms, this means to create a root certificate authority, and request and sign certificates, including intermediate CAs and certificate revocation lists (CRL).

Downloads

If you are looking for release downloads, please see the releases section on GitHub. Releases are also available as source checkouts using named tags.

Documentation

For 3.x project documentation and usage, see the README.quickstart.md file or the more detailed docs under the doc/ directory. The .md files are in Markdown format and can be converted to html files as desired for release packages, or read as-is in plaintext.

Getting help using easy-rsa

Currently, Easy-RSA development co-exists with OpenVPN even though they are separate projects. The following resources are good places as of this writing to seek help using Easy-RSA:

The openvpn-users mailing list is a good place to post usage or help questions.

Users of GitHub can report problems to the Easy-RSA issues list.

Branch structure

The easy-rsa master branch is currently tracking development for the 3.x release cycle. Please note that, at any given time, master may be broken. Feel free to create issues against master, but have patience when using the master branch. It is recommended to use a release, and priority will be given to bugs identified in the most recent release.

The prior 2.x and 1.x versions are available as release branches for tracking and possible back-porting of relevant fixes.

Branch layout is:

master             <- Active: v3.2.x - Rolling.
v3.<N>.<N>-<LABEL>    Active: Development branches.
testing               Sandbox: Subject to change without notice.
v3.1.8                Sunset: Bugfix only for v3.1.7

The following are NOT compatible with OpenSSL version 3:

v3.0.6                Inactive: Archived.
v3.0.5                Inactive: Archived.
v3.0.4                Inactive: Archived.
release/3.0           Inactive: Archived.
release/2.x           Inactive: Archived.
release/1.x           Inactive: Unmaintained.

LICENSING info for 3.x is in the COPYING.md file

Contributing

Please refer to: doc/EasyRSA-Contributing.md

Code style, standards

We are attempting to adhere to the POSIX standard, which can be found here:

https://pubs.opengroup.org/onlinepubs/9699919799/