Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v3.2.0 Moved #1040

Closed
wants to merge 30 commits into from
Closed

v3.2.0 Moved #1040

wants to merge 30 commits into from

Conversation

TinCanTech
Copy link
Collaborator

@TinCanTech TinCanTech commented Oct 29, 2023 •
edited
Loading

Follow-up: #1041

CLOSED

@TinCanTech
Remove prefer_vars_in_pki_msg()
8d40587 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Remove $no_new_vars
b683db9 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Remove $new_vars_true
67380b3 
Allows removal of the 'init-pki' section of 'install_data_to_pki()'.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Remove $vars, replaced by $EASYRSA_VARS_FILE
cebd958 
Only effects upgrade, up23_manage_upgrade_23()

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Remove $vars_file and $vars_file_example
a116b27 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Remove $user_vars_true
3ae9c86 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
For shellcheck: Add directives to ignore unreachable code
a05fa59 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
install_data_to_pki(): Downgrade Failure to Warning
7960b4c 
If the openssl-easyrsa.cnf file fails to copy then try to create it
using create_openssl_easyrsa_cnf(). If creating the file also fails
then that is a fatal error.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
escape_hazard(): Reuse source_vars()
5cb462d 
This catches misuse of command options for DN.
eg: --dn-mode=org --req-ou="Test backtick: `" build-* foo

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
source_vars(): Use grep efficiently
5f207cd 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Standardise function definition syntax
294dace 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Refactor moving temp-files to target-files
0d12f4e 
Because different commands have different cleanup requirements,
this code reduces the success check to an if-then per command.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Add alias 'show-eku', for original command 'x509-eku'
2733622 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
x509-eku: Add support for x509-types/code-signing
6104c39 
Rewrite command x509-eku to allow easy inclusion for new EKU types.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
create_x509_type(): Return error, do not die
f88c08a 
Due to output redirection, errors must only return an error, not use die.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
clean_up(): Move file-restore tasks before temp-dir removal
5f6111a 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
renew: On sign-req error, restore files once and clear flag
361ac95 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
easyrsa_openssl(), verify_working_env(): Improve verbose messages
607baaf 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
create_x509_type(): Add type: codeSign
257af50 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
easyrsa_openssl(): Use 'case' for command selection
d249eeb 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
ChangeLog: Expand renewable cert-types to include code-signing
6ab01d8 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Merge branch 'remove-unused-code' of ssh://github.com/TinCanTech/easy…
52bac31 
…-rsa into v3.2.0

Removed a single extra space char.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Merge branch 'escape_hazard_reuse_source_vars' of ssh://github.com/Ti…
0eaa5c9 
…nCanTech/easy-rsa into v3.2.0

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Merge branch 'x509-eku-v2' of ssh://github.com/TinCanTech/easy-rsa in…
bf17a5f 
…to v3.2.0

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
sign-req, SAN extention: Move set $san above output command group
f8702fe 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
sign-req: Simplify code for EASYRSA_EXTRA_EXTS vs auto-SAN
de8051a 
EASYRSA_EXTRA_EXTS, as set by command line ALWAYS takes priority.

For a server or serverClient certificate:
If not set then EASYRSA_EXTRA_EXTS is set to a Server-Alt-Name [SAN],
from either the certificate request file or the cerificate commonName.

For all other certificates types, no default SAN is set.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
display-san: Replace '&&' with 'if/then' to avoid hanging error exit
5571aac 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech TinCanTech changed the title V3.2.0 v3.2.0 alpha-1 Oct 30, 2023
@TinCanTech TinCanTech added this to the v3.2.0 milestone Oct 30, 2023
@TinCanTech
New diagnostic command 'display-cn'
4fec8a7 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
Reorder functions: Move display_dn() above display_san()
4d31728 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech
display_dn: Remove unwanted variable $name_opts
16b382f 
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech TinCanTech self-assigned this Nov 2, 2023
@TinCanTech TinCanTech linked an issue Nov 2, 2023 that may be closed by this pull request
Provide renew command for all supported X509 certificate types #694
Closed
@TinCanTech TinCanTech closed this Nov 8, 2023
@TinCanTech TinCanTech deleted the v3.2.0 branch November 8, 2023 01:32
@TinCanTech TinCanTech changed the title v3.2.0 alpha-1 v3.2.0 moved to #1041 Nov 8, 2023
@TinCanTech TinCanTech changed the title v3.2.0 moved to #1041 v3.2.0 Moved Nov 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@TinCanTech TinCanTech

Labels
Version 3.2.0-alpha1
Projects
None yet
Milestone
v3.2.0
Development

Successfully merging this pull request may close these issues.

Provide renew command for all supported X509 certificate types
1 participant
@TinCanTech