v3.1.2

What's Changed

• Command 'renew': Remove option 'nopass' by @TinCanTech in #741
• find_x509_types_dir(): Remove excess checks by @TinCanTech in #742
• Remove function find_x509_types_dir() by @TinCanTech in #743
• For 'init-pki hard' only, always try to create a new pki/vars file by @TinCanTech in #744
• Introduce global option '--notext|--no-text' by @TinCanTech in #745
• Minor style change by @TinCanTech in #746
• Introduce command 'set-pass' by @TinCanTech in #756
• Fix shellcheck warning for command set-pass case statement by @TinCanTech in #777
• cleanup(): Exit correctly for SIGINT by @TinCanTech in #775
• Update help: Standardise output; Improve code; Reprioritise options by @TinCanTech in #778
• vars.example: Add EASYRSA_NO_PASS and wrap long lines by @TinCanTech in #783
• Use 'unset -v', consistently by @TinCanTech in #784
• build-ca: Improve passphrase input mechanism by @TinCanTech in #786
• Remove global options '--verbose' and '--quiet' as not required by @TinCanTech in #789
• Remove all prerequisite code to build a safe SSL config file by @TinCanTech in #791
• Rename temp files to reflect the purpose by @TinCanTech in #793
• easyrsa_openssl(): Always set OPENSSL_CONF to EasyRSA safe SSL config by @TinCanTech in #794
• Replace SSL calls for serial number with function ssl_cert_serial() by @TinCanTech in #797
• Introduce OpenSSL only mode: No Safe SSL Config File by @TinCanTech in #800
• ff_date_to_cert_date(): Correct the input format for busybox date by @TinCanTech in #806
• Re-order easyrsa_openssl() temp-file assignment by @TinCanTech in #807
• Stop EASYRSA_DEBUG interfering with SSL output from subshells by @TinCanTech in #808
• Status reports: Recognise Expired certificates by @TinCanTech in #810
• New function safe_set_var(): Safe wrapper for set_var() by @TinCanTech in #811
• Windows, build-ca: Add input password to re-open private key by @TinCanTech in #813
• Renewal: General code improvements by @TinCanTech in #817
• cleanup(): General improvements - Create KNOWN error exit by @TinCanTech in #818
• build-ca: Change FATAL error to warning for old openssl-easyrsa.cnf by @TinCanTech in #821
• Allow --fix-offset to create post-dated certificates by @TinCanTech in #804
• Default settings: Make default Edwards curve ED25519 by @TinCanTech in #828
• cleanup(): Exit with numeric error-code only by @TinCanTech in #831
• init-pki(): Introduce second warning before HARD removal by @TinCanTech in #832
• build-full: Always enable inline file creation by @TinCanTech in #834
• Global option '--passout' always take priority ONLY by @TinCanTech in #839
• Status Reports: Set 'LC_TIME=C.UTF-8', only used for reports by @TinCanTech in #840
• Option --fix-offset: Adjust off-by-one day by @TinCanTech in #847

Full Changelog: v3.1.1...v3.1.2