search

OpenVPN / easy-rsa

easy-rsa - Simple shell based CA utility
Other
4.07k stars 1.2k forks source link

Add batch mode for the `expire` subcommand #1206

Closed sdavids closed 3 months ago

sdavids commented 3 months ago

Currently, there is no batch mode for the expire subcommand.

$ easyrsa expire httpd.local
Using Easy-RSA 'vars' configuration:
* /Users/dev/.local/secrets/easyrsa/pki/vars

Please confirm you wish to expire the certificate
with the following subject:

subject=
    commonName                = httpd.local

    serial-number             = BFEBE5C55A788AFF503DCAF8561178C0

    notAfter date             = Aug 11 11:15:43 2024 GMT

Type the word 'yes' to continue, or any other input to abort.
    Continue with expiry:

Something along the lines:

$ easyrsa expire --batch httpd.local

or

$ easyrsa expire --batch --yes httpd.local
sdavids commented 3 months ago

Maybe for all subcommands of the new renew workflow.

TinCanTech commented 3 months ago

@sdavids Which version of Easy-RSA are you using ?

sdavids commented 3 months ago

$ brew install easy-rsa⇒ https://github.com/OpenVPN/easy-rsa/releases/tag/v3.2.0

https://github.com/Homebrew/homebrew-core/blob/a851377dbbdb79b247ea257f6b5a08d926d4dce9/Formula/e/easy-rsa.rb#L4-L5

TinCanTech commented 3 months ago

All commands support --batch mode.

Please check the syntax of the command you use.