2022-10-14 - Signatures were corrupted on upload. Re-uploading verified sigs.
What's Changed
- Standardise all output for warn(), notice() and message():[New] by @TinCanTech in #574
- Expand status reports to include checking a single certificate by @TinCanTech in #577
- Introduce 'rewind-renew' - Recover "guineapig" renewed certificates by @TinCanTech in #579
- Improve revocation and renewal functions by @TinCanTech in #580
- Correctly quote 'sed' and auto-escape ampersand by @TinCanTech in #584
- Auto-escape '&' and '$' in 'org' mode fields - Other minor tweaks by @TinCanTech in #590
- Remove restrictive 30-day window hindering 'renew' by @TinCanTech in #594
- Replace cert dates by @TinCanTech in #595
- Introduce 'serialNumber' field for DN (OID 2.5.4.5) by @TinCanTech in #606
- Upgrade-23: Assign a secure session for temporary directory by @TinCanTech in #623
- Introduce 'renew-req': Create new CSR for an existing private key by @TinCanTech in #616
- Restore files when 'renew' fails during 'build_full()' phase by @TinCanTech in #617
- Ensure 'pki/renewed/' exist for 'rewind-renew' by @TinCanTech in #618
- Allow vars file to exist in current directory (Fix make-cadir) by @TinCanTech in #635
- gen-dh: Use temporary file by @TinCanTech in #636
- sign--req: Prohibit COMMON as a certificate type by @TinCanTech in #637
- show: Reorder parameter checks to guard against empty input by @TinCanTech in #639
- verify_ca_init: Reorder names to improve error message by @TinCanTech in #638
- Re-enable the use of --vars=file for init-pki by @TinCanTech in #640
- Expand the possible values of $prog_dir, include full path by @TinCanTech in #641
- vars_setup(): Always warn about unsupported characters in vars by @TinCanTech in #642
- renew: Improve notices and input check by @TinCanTech in #645
- Options: Check that $val is numeric when a number is expected by @TinCanTech in #646
- Unsupported characters: Correct check and warning message by @TinCanTech in #649
- sign-req: Enforce X509-type files exist and are used. (#581) by @TinCanTech in #650
- cleanup: Make "clean line" respect silent, batch and quiet modes by @TinCanTech in #652
- Overhaul vars detection by @TinCanTech in #655
- detect_host: Use SSL Library version from EasyRSA version by @TinCanTech in #656
- Options: Add '-s' to also enabe --silent mode. by @TinCanTech in #657
- Options: Rescind deprecation notice of option --req-cn by @TinCanTech in #660
- x509-types: Add x509-types location to usage() STATUS by @TinCanTech in #662
- vars_setup: Correctly locate x509-types for usage() directory STATUS by @TinCanTech in #665
- x509-types: Reset non-existent x509-types dir set by vars by @TinCanTech in #666
- fixed typo by @ashutoshojha5 in #670
- Options: Expand alias '--days' to all suitable options with a period by @TinCanTech in #674
- Options: Introduce --keep-tmp=NAME; Keep the temporary session data by @TinCanTech in #667
- Option --req-cn: Restore original behavior from v30x series by @TinCanTech in #682
- renew-req: Add command option 'nopass' by @TinCanTech in #683
- Remove renew-req by @TinCanTech in #685
- Documentation: Add EasyRSA-Renew-and-Revoke.md by @TinCanTech in #690
- X509-types: Always check SSL config file for EasyRSA insert-markers by @TinCanTech in #695
- Rename 'renew' to 'rebuild' - Introduce 'renew' version 3 by @TinCanTech in #688
- build-ca: Check x509-types 'ca' and 'COMMON' files exist by @TinCanTech in #697
- Status Report 'show-renew': Include renewed certs from /cert_by_serial by @TinCanTech in #700
- Doc-Update: Note that all changes were included with Easy-RSA v3.1.1 by @TinCanTech in #701
- ChangeLog: Final update for v3.1.1 by @TinCanTech in #702
- build_full: Remove sign_req() subshell and do full cleanup by @TinCanTech in #705
- Option --keep-tmp: Append EASYRSA_TEMP_DIR_session random number by @TinCanTech in #711
- Option --keep-tmp: Reliability improvements by @TinCanTech in #712
- Opt. --subca-len: basicConstraints CA extension, Append 'pathlen:N' by @TinCanTech in #706
- Refactor Netscape support by @TinCanTech in #710
- help: Document supported certificate X509 types by @TinCanTech in #704
- Remove obsolete command 'renewable' by @TinCanTech in #715
- Doc: EasyRSA-Contributing.md - Update by @TinCanTech in #719
- init-pki soft: Include delete of revoked and renewed sub-directories by @TinCanTech in #720
New Contributors
- @ashutoshojha5 made their first contribution in #670
Full Changelog: v3.1.0...v3.1.1