search

OpenVPN / easy-rsa

easy-rsa - Simple shell based CA utility
Other
4k stars 1.19k forks source link

Easy-RSA hangs on Windows 11 #1078

Closed TinCanTech closed 1 month ago

TinCanTech commented 7 months ago

On Windows 11, Easy-RSA requires Administrator Access.

According to extensive testing: Windows 11 will only allow MKSH:sh.exe to function, if full admin privileges have been granted via the Windows-User-Access-Control interface.

This restriction means that Easy-RSA will not run from any directory (System or User), unless full admin privileges have been granted via WUAC.

TinCanTech commented 1 month ago

Important note: secure_session()

    # atomic:
    if mkdir "$secured_session"; then

does not work as expected because mkdir.exe always returns zero, no matter the actual result. Since Windows 10/11.

Also, easyrsa_mkdir() is not atomic.