3.0.5 (2018-09-15)
- Fix #17 & #58: use AES256 for CA key
- Also, don't use read -s, use stty -echo
- Fix broken "nopass" option
- Add -r to read to stop errors reported by shellcheck (and to behave)
- remove overzealous quotes around $pkcs_opts (more SC errors)
- Support for LibreSSL (now works on latest version of MacOS)
- EasyRSA version will be reported in certificate comments
- Client certificates now expire in 3 year (1080 days) by default