Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

easyrsa-tools.lib: New command 'renew ca' #1255

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

easyrsa-tools.lib: New command 'renew ca' #1255

wants to merge 2 commits into from
+232 −1

Commits on Nov 26, 2024

  1. easyrsa-tools.lib: New command 'renew-ca' 

    Sign a new CA certificate from the original CA private key.
Support all options provided by Easy-RSA, eg. 'critical' attribute.

The code is very similar to the standard 'build-ca' command, without
the generation of a new private key.

The new CA certificate will replace the old one.
The old certificate is kept in a list of expired CA certificates:
This new file is 'pki/exipred-ca-cert.list'

The final replacement of the old CA is guarded by a confirmation.
If the confirmation fails then all new data is discarded.

Signed-off-by: Richard T Bonhomme <[email protected]>
    @TinCanTech
    TinCanTech committed Nov 26, 2024
    Configuration menu
    Copy the full SHA
    33bcbae View commit details
    Browse the repository at this point in the history

  2. Integrate easyrsa-tools.lib:'renew-ca' into command selection 

    Signed-off-by: Richard T Bonhomme <[email protected]>
    @TinCanTech
    TinCanTech committed Nov 26, 2024
    Configuration menu
    Copy the full SHA
    e03f023 View commit details
    Browse the repository at this point in the history