Replace `local` / `global` `openssl-easyrsa.cnf`#1394

Merged

TinCanTech merged 21 commits intoOpenVPN:masterfrom

TinCanTech:bug-1390-fix-v5

Oct 3, 2025

Commits on Sep 27, 2025

Improve and simplify verify_working_env()
TinCanTech
committed
Introduce check_ssl_cnf_known_hash(): Check input file hash
TinCanTech
committed
Introduce sed_expand_ssl_config(): Replacement for expand_ssl_config()
TinCanTech
committed
Introduce expand_safe_ssl_cnf(): Wrapper to fully expand SSL config
TinCanTech
committed
easyrsa_openssl(): Add final SSL config file safe expansion
TinCanTech
committed
escape_hazard(): Remove conditional execution
TinCanTech
committed
check_ssl_cnf_known_hash() - correct error messages
TinCanTech
committed
easyrsa_openssl() - expand EASYRSA_SSL_CONF and export to OPENSSL_CONF v2 add 'else'
TinCanTech
committed
easyrsa_openssl() - Remove local/global use of EASYRSA_SSL_CONF
TinCanTech
committed
Remove write_easyrsa_ssl_cnf_tmp() and usage (replaced by easyrsa_openssl() final expansion)
TinCanTech
committed
Introduce and use provide_EASYRSA_SSL_CONF_tmp(), unexpanded openssl-easyrsa.cnf
TinCanTech
committed
Remove expand_ssl_config(), unused
TinCanTech
committed
sed_expand_ssl_config(): # check params, correct conditional
TinCanTech
committed
easyrsa_openssl(): easyrsa_mktemp, remove unnecessary error check
TinCanTech
committed
Remove $original_ssl_cnf and add comment for missing tmp-dir
TinCanTech
committed
escape_hazard(): Add error detection for sourcing tmp-file
TinCanTech
committed

Commits on Sep 28, 2025

verify_working_env(): Simplify pki/ca checks
TinCanTech
committed

Commits on Oct 2, 2025

Commits on Oct 3, 2025

ChangeLog: Replace "local" openssl-easyrsa.cnf
TinCanTech
committed