Re: easyrsa build-ca does not use my var file

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Bruce,

EasyRSA 3.0.8 is ancient.
Debian 11 is no spring chicken.

My only suggestion is that you upgrade EasyRSA to v3.2.2

Regards
Richard


Sent with Proton Mail secure email.

On Tuesday, 4 February 2025 at 06:23, Bruce Bannerman <[email protected]> wrote:

> Hello everyone,
> 
> Environment: Debian 11.11
> 
> easyrsa version 3.0.8
> 
> Issue:
> 
> I’m trying to initialise and build my intermediate CA
> 
> easyrsa build-ca does not use my modified variables when it creates my new CA.
> 
> My custom variables are in the file “vars" in my ~/easy-rsa directory
> 
> The vars file is a copy of the file “vars.example"
> 
> in vars, I have modified the following variables:
> 
> set_var EASYRSA “~/easy-rsa/"
> set_var EASYRSA_KEY_SIZE 4096
> set_var EASYRSA_DIGEST "sha512"
> 
> The file permissions assign to the file ~/easy-rsa/vars are u=rw,go=, where the file owner is the owner of ~/
> 
> I’ve also tried an ownership definition of u=rw,go=r, but this makes no difference.
> 
> When I run the commands:
> 
> ./easyrsa init-pki
> ./easyrsa build-ca
> 
> and then check the created certificate with: openssl x509 -noout -text -in ~/easy-rsa/pki/ca.crt
> 
> I find:
> 
> Signature Algorithm: sha256WithRSAEncryption
> Public Key Algorithm: rsaEncryption
> RSA Public-Key: (2048 bit)
> 
> This is not what I had defined in ~/esay-rsa/vars.
> 
> Any pointers on how to get this working will be appreciated.
> 
> Kind regards,
> 
> Bruce
> 
> 
> 
> _______________________________________________
> Openvpn-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsC5BAEBCgBtBYJnol3TCZBPl5z2a5C4nUUUAAAAAAAcACBzYWx0QG5vdGF0
aW9ucy5vcGVucGdwanMub3JnpYUuVXHh5MBr3LV6uomFhv5ul1g9oMoFsXsR
6xkl8wYWIQQJvD1EZ6ONcnnFVVVPl5z2a5C4nQAA9RMH/R10S9ARpe8KZ/I/
r8gr5v/+bI4yW5mNKcvNp2ooQDf+RK9MckvISQNE++F4oZJJUCpp9Kph3ea2
jnSKskxYZJ9YJCgXR+8O544dRfsbjOLCtJc4rE1dAaO5fJcC3Vp0M2xKuByB
jLwYG/RWlgt3BVZKfgBHctAmxRCm5GDAhCqgCcnP4x+HYOVCTyxor2sEfr70
uoS5ge7MSyi3+W6Hu2tsHG6ZTfvIzeiamEQwn+UUn84UpQdhUYsXIP/zXPc0
VaKR+JUqs/eRN+WFBVmFmtr6H1vrjUMuYLoBpBNLHxSR20jK734Sls/NzyOA
3Dz9O5jHUjlGSBRQHtr1sOgG61U=
=rCdM
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=/Dea
-----END PGP PUBLIC KEY BLOCK-----