After an upgrade to OpenBSD 7.2, I found that easy-rsa was unable to generate
certificate requests when not encrypting the key file, as it used -noenc
instead of -nodes.  This issue is fixed in easy-rsa 3.1.1.

Not sure if we should considering applying
https://github.com/OpenVPN/easy-rsa/commit/4472516e24b068542cfd1ff5c3e51c3b89eb38b1
as a distpatch. I ran into the issue this fixes after the upgrading to
easy-rsa 3.1.1.  It's not too difficult to work around, though.

OKs?

Thanks,
Jeremy

Index: Makefile
===================================================================
RCS file: /cvs/ports/security/easy-rsa/Makefile,v
retrieving revision 1.14
diff -u -p -r1.14 Makefile
--- Makefile    8 Jun 2022 16:13:14 -0000       1.14
+++ Makefile    14 Nov 2022 18:24:20 -0000
@@ -1,6 +1,6 @@
 COMMENT =      small RSA key management package
 
-V =            3.1.0
+V =            3.1.1
 PKGNAME =      easy-rsa-${V}
 DISTNAME =     EasyRSA-${V}
 EXTRACT_SUFX = .tgz
Index: distinfo
===================================================================
RCS file: /cvs/ports/security/easy-rsa/distinfo,v
retrieving revision 1.9
diff -u -p -r1.9 distinfo
--- distinfo    8 Jun 2022 16:13:14 -0000       1.9
+++ distinfo    14 Nov 2022 18:24:24 -0000
@@ -1,2 +1,2 @@
-SHA256 (EasyRSA-3.1.0.tgz) = AbB+y1jcAD5H1OdPn8TaNexoQuls0APWbtcqQ9+YNlk=
-SIZE (EasyRSA-3.1.0.tgz) = 61255
+SHA256 (EasyRSA-3.1.1.tgz) = d51CXKzx3lYmK3p+1rkLNuYUzpJz8IrXuGmSdAyzsqU=
+SIZE (EasyRSA-3.1.1.tgz) = 68434
Index: pkg/PLIST
===================================================================
RCS file: /cvs/ports/security/easy-rsa/pkg/PLIST,v
retrieving revision 1.9
diff -u -p -r1.9 PLIST
--- pkg/PLIST   11 Mar 2022 19:53:22 -0000      1.9
+++ pkg/PLIST   14 Nov 2022 18:24:28 -0000
@@ -6,7 +6,9 @@ share/easy-rsa/README.md
 share/easy-rsa/README.quickstart.md
 share/easy-rsa/doc/
 share/easy-rsa/doc/EasyRSA-Advanced.md
+share/easy-rsa/doc/EasyRSA-Contributing.md
 share/easy-rsa/doc/EasyRSA-Readme.md
+share/easy-rsa/doc/EasyRSA-Renew-and-Revoke.md
 share/easy-rsa/doc/EasyRSA-Upgrade-Notes.md
 share/easy-rsa/doc/Hacking.md
 share/easy-rsa/doc/Intro-To-PKI.md

Reply via email to