Re: Migrating OpenVPN server - easyrsa question...

tincantech via Openvpn-users <[email protected]> Mon, 17 Feb 2025 20:39:57 +0000
Newsgroups gmane.network.openvpn.user
Message-ID <IgJ5FNzgPDIxo1pfCLRvgMhyNR6caaBKB8C-GpJpWXU7oz1uC8W-4QlVQKlSJjbmLMqknS4wIKxALeTX5wJTghq71SMJeah_cxTVbPWvuv4=@protonmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Bo,

Sent with Proton Mail secure email.

On Monday, 17 February 2025 at 15:28, Bo Berglund <[email protected]> wrote:

> On the old server I have migrated over the years through easyrsa versions up to
> 3.1.5, which is what is now used there.
> 
> Can I just copy over the directory tree in $HOME/openvpn where all the
> management stuff resides and then replace easyrsa with the now latest version
> from Github (3.2.2) without editing my scripts that use easyrsa?

Yes, copy your data and upgrade to Easy-RSA v 3.2.2 - That is supported.

> I.e. has there been some functional change regarding the way to use easyrsa
> between those versions?

There is one functional change:

Command `revoke` can only be used in --batch mode.
Otherwise, for interactive use, the command is now `revoke-issued`.
This is to protect against revoking an 'issued' certificate when it
is intended to revoke a 'renewed' or 'expired' certificate.

Regards
R

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=M/kS
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
publickey - [email protected] - 0x09BC3D44.asc (application/pgp-keys, 1.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=/Dea
-----END PGP PUBLIC KEY BLOCK-----
publickey - [email protected] - 0x09BC3D44.asc.sig (application/pgp-signature, 380 B) - not displayed