Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Files in 'x509-types' may be missing #581

Closed
TinCanTech opened this issue May 23, 2022 · 5 comments
Closed

Files in 'x509-types' may be missing #581

TinCanTech opened this issue May 23, 2022 · 5 comments
Assignees
@TinCanTech
Labels
development Possible changes discussion Priority Acknowledged priority X509-types x509-types and related
Milestone
v3.1.1 - RC1 - de...

Comments

@TinCanTech
Copy link
Collaborator

TinCanTech commented May 23, 2022 •
edited
Loading

Example:

  • Delete x509-types/COMMON
  • Build a CA
$ easyrsa build-ca nopass
* Using Easy-RSA configuration from: /home/tct/git/easy-rsa/test/installed/pki/vars
* Using SSL: openssl OpenSSL 1.1.1f  31 Mar 2020
cat: /usr/share/easy-rsa/x509-types/COMMON: No such file or directory
.............................................+++++
..........................+++++

The CA is successfully built.

Question: How to handle this (minor) error ?

  1. Do nothing.
  2. Suppress error. Redirect 2>/dev/null
  3. Suppress error. Test if [ -e "$EASYRSA_EXT_DIR/COMMON" ] && cat foo
  4. Warn about missing files @ every run / init-pki
  5. ~ something else ..
  6. Require all files in x509-types to be present.
@TinCanTech TinCanTech added the X509-types x509-types and related label Jun 13, 2022
@TinCanTech
Copy link
Collaborator Author

Linking #596

@TinCanTech TinCanTech self-assigned this Jun 14, 2022
@TinCanTech TinCanTech added the Priority Acknowledged priority label Jun 14, 2022
@TinCanTech TinCanTech added this to the v3.1.1-RC1 milestone Jun 14, 2022
@TinCanTech
Copy link
Collaborator Author

TinCanTech commented Jun 14, 2022 •
edited
Loading

EasyRSA will no longer make false claims.

6. Require all files in x509-types to be present

Option number 6 above is the only acceptable solution.

@TinCanTech
Copy link
Collaborator Author

TinCanTech commented Jun 21, 2022 •
edited
Loading

Linking:
#607 - Now invalid.
#608 - Now invalid.

TinCanTech added a commit to TinCanTech/easy-rsa that referenced this issue Aug 20, 2022
@TinCanTech
sign-req: Enforce X509-type files exist and are used. (OpenVPN#581)
805f3b7 
Signed-off-by: Richard T Bonhomme <[email protected]>
@TinCanTech
Copy link
Collaborator Author

Closed via TinCanTech@805f3b7

@TinCanTech
Copy link
Collaborator Author

linking: #696

TinCanTech added a commit to TinCanTech/easy-rsa that referenced this issue Sep 20, 2022
@TinCanTech
ChangeLog: 'Always ensure X509-types files exist (OpenVPN#581 OpenVPN…
993f504 
…#696)'

Signed-off-by: Richard T Bonhomme <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@TinCanTech TinCanTech

Labels
development Possible changes discussion Priority Acknowledged priority X509-types x509-types and related
Projects
None yet
Milestone
v3.1.1 - RC1 - development
Development

No branches or pull requests
1 participant
@TinCanTech