TinCanTech / easy-tls

Manage and Inline OpenVPN TLS keys and Easy-RSA PKI credentials. Supports OpenVPN TLS-Crypt-V2 key system and OpenVPN Peer-Fingerprint mode.
GNU General Public License v2.0
87 stars 19 forks source link
automation certificates cryptography easyrsa inline keys openvpn openvpn-peer-fingerprint openvpn-tls-crypt-v2 shell-script tls vpn x509

CI

Easy-TLS

From that list above, the only file which you need is: easytls

Standard Features

Easy-TLS is an Easy-RSA extension utility to help manage:

Additional Features

Easy-TLS also supports No-CA mode, which does not require an Easy-RSA CA:

Installation

Download: easytls to your easyrsa3 working directory.

For full support, you will also need these scripts for use by your OpenVPN Server:

Environment

easytls is intended to work everywhere that openvpn and easyrsa work.

Requirements

Support

Please use the issues section here on github.
For live support you can use IRC channel: libera.chat/#easytls
Wiki: https://github.com/TinCanTech/easy-tls/wiki
Howto: https://github.com/TinCanTech/easy-tls/blob/master/EasyTLS-Howto-ii.md

Acknowledgements

Easy-TLS is written in the style of and borrows heavily from Easy-RSA
See: https://github.com/OpenVPN/easy-rsa
Note:
This is intended to facilitate maximum compatibility with Easy-RSA while extending functionality
to include direct support for OpenVPN specific TLS keys and Inline credentials.

Easy-TLS is inspired by syzzer

See: https://github.com/OpenVPN/openvpn/blob/master/doc/tls-crypt-v2.txt

I hope that you find Easy-TLS to be a useful tool.