What's Changed
- fixed_cert_dates(): Remove subshell by @TinCanTech in #849
- Add 'verify-cert' command to current 'verify' command by @TinCanTech in #850
- Re-order output messages and subsequent newlines for aesthetics by @TinCanTech in #851
- build_ca(): Wrap long lines by @TinCanTech in #852
- build-ca: Write 'unique_subject = no' to index.txt.attr file by @TinCanTech in #854
- Remove hard-coded unit-test password from build-ca by @TinCanTech in #857
- Rename safe_set_var() to force_set_var() by @TinCanTech in #858
- build-ca: Minor code reformat (aesthetics) by @TinCanTech in #860
- Wrap long lines: easyrsa_openssl(), sed command by @TinCanTech in #864
- Move calling show_host() to function die(), where it belongs by @TinCanTech in #868
- Remove ineffectual redirector by @TinCanTech in #869
- Remove redundant separator lines by @TinCanTech in #870
- Remove debug symbols by @TinCanTech in #865
- Move verify_ssl_lib() - Always verify SSL lib, for all commands by @TinCanTech in #877
- easyrsa_mktemp(): Use sequential numbered temp files by @TinCanTech in #876
- cleanup(): Only enable terminal echo when it has been disabled by @TinCanTech in #880
- set-var(): Check input, die on errors by @TinCanTech in #882
build-ca: Manual password bug fixes by @TinCanTech in #886- sign-req: Only create a random serial number file when expected by @TinCanTech in #896
- sign-req: Use either SSL option -days OR -startdate/-enddate by @TinCanTech in #897
- Use set_var to correctly assign EASYRSA_REQ_SERIAL by @TinCanTech in #900
- gen-crl: Minor improvements by @TinCanTech in #903
- Upgrade_23: Prioritise new PKI creation to allow temp file creation by @TinCanTech in #906
- General improvements by @TinCanTech in #908
- Status reports: Warn if given commonName is not found in database by @TinCanTech in #911
- vars_setup(): Refactor 'Sanitize vars' by @TinCanTech in #912
- Introduce option -S|--silent-ssl: Silence SSL output by @TinCanTech in #913
- CI: Update checkout to v3 by @TinCanTech in #917
- Replace fixed offset date code by @TinCanTech in #918
- vars file: Allow 'EASYRSA_VARS_FILE' to be set externally by @TinCanTech in #924
- Status reports: Leap Years, apply Day Feb-29 after Feb-28 by @TinCanTech in #928
- easyrsa_openssl(): Create a safe SSL config once per instance ONLY by @TinCanTech in #931
- Windows: Warn when using Windows default location in 'Program Files' by @TinCanTech in #937
- secure_session(): Move in verify_working_env() Remove from 'init-pki' by @TinCanTech in #938
- Introduce global option --force-safe-ssl by @TinCanTech in #935
- vars: Prohibit use of
exportandunsetinvarsfile by @TinCanTech in #932 - Status reports: Additional check, Use SSL to determine expiration by @TinCanTech in #940
- import-req: Check input file exists by @TinCanTech in #945
- remove_secure_session(): Return-On-Success Only by @TinCanTech in #943
- X509-types insert markers: Move and improve by @TinCanTech in #946
- easyrsa_openssl(): makesafecnf - Copy temp-file do NOT move by @TinCanTech in #948
- mutual_exclusions(): Use of --silent and --verbose is unresolvable by @TinCanTech in #949
- Build Safe SSL config at correct stage by @TinCanTech in #954
- build-ca: Replace password temp-file method with file-descriptors by @TinCanTech in #955
Full Changelog: v3.1.2...v3.1.3