CVS commit: pkgsrc/security/easy-rsa

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jul 21 08:47:11 UTC 2025

Modified Files:
        pkgsrc/security/easy-rsa: Makefile distinfo

Log Message:
easy-rsa: updated to 3.2.3

3.2.3

Update OpenSSL to v3.5.0
renew: Print 'unique_subject = no' to index.txt.attr
check_serial_unique(): Check for duplicate Subject error
Correctly define options names - Remove wild-card pattern
Remove all references to file:easyrsa-tools.lib
Reinstate old function as 'db_date_to_iso_8601()' [Renamed]
expire_status_v2(): Refactor 'if' statement to capture error correctly
source_vars() improvements
add_critical_attrib(): Do not add 'critical' if 'critical' exists
inline_file(): Include DH file or placeholder, for RSA Servers
Fix shellcheck warnings
Introduce command line options --umask|--no-umask, to set 'umask'
Introduce "robust" lock-file mechanism
New function set_no_clobber()
Easyrsa mktemp v2
add_critical_attrib_v2(): Move file access to function
Command 'write': Remove options 'overwrite' and 'filename'
Introduce option --text: Create CSR files with human readable text
will_cert_be_valid(): Remove SSL option -noout
easyrsa_mktemp(): Remove secondary atomic operation
easyrsa_mkdir(): Separate Windows from *nix
Update Copyright 2025
inine_file(): Correct logic and add 'dh none' for DH params file
show-expire: Move setting $pre_expire_window_s to status()
Always export EASYRSA_SSL_CONF, when assigned (code standard)
Unit-test: Drop old *nix test
add_critical_attrib(): export temp-file name as input file
Inline improvements
Unit-test: Minimize Windows test
PKI lock-file: Move possible creation to sub-function request_lock_file()
forbid_selfsign(): Compare cert serial to signing cert serial
inline_file(): Use ssl_cert_serial()
Inline self sign improvements
peer-fingerprint mode: Make CA mode mutually exclusive to PFP mode
Remove init pki soft


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/easy-rsa/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/security/easy-rsa/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/easy-rsa/Makefile
diff -u pkgsrc/security/easy-rsa/Makefile:1.19 pkgsrc/security/easy-rsa/Makefile:1.20
--- pkgsrc/security/easy-rsa/Makefile:1.19      Tue Feb  4 02:02:32 2025
+++ pkgsrc/security/easy-rsa/Makefile   Mon Jul 21 08:47:11 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2025/02/04 02:02:32 gdt Exp $
+# $NetBSD: Makefile,v 1.20 2025/07/21 08:47:11 adam Exp $
 
-DISTNAME=      EasyRSA-3.2.2
+DISTNAME=      EasyRSA-3.2.3
 PKGNAME=       ${DISTNAME:S/EasyRSA/easy-rsa/}
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=OpenVPN/}

Index: pkgsrc/security/easy-rsa/distinfo
diff -u pkgsrc/security/easy-rsa/distinfo:1.20 pkgsrc/security/easy-rsa/distinfo:1.21
--- pkgsrc/security/easy-rsa/distinfo:1.20      Tue Feb  4 02:02:32 2025
+++ pkgsrc/security/easy-rsa/distinfo   Mon Jul 21 08:47:11 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.20 2025/02/04 02:02:32 gdt Exp $
+$NetBSD: distinfo,v 1.21 2025/07/21 08:47:11 adam Exp $
 
-BLAKE2s (EasyRSA-3.2.2.tgz) = 9934115a08d26dee7df26d00d90422d64319d3a06ce068351da803fda84ba7ae
-SHA512 (EasyRSA-3.2.2.tgz) = 329114b48a1f2e4135aceca01da47d01e1871d489fc2189a1771295b1fce0716d5676842339dbb6ccc8255ae42b773225ffb79f1acef9ebc107b881c96ba94a7
-Size (EasyRSA-3.2.2.tgz) = 86324 bytes
+BLAKE2s (EasyRSA-3.2.3.tgz) = 08d4c9589cbf2905eee01b86147a194a3b2a8f16977898efc6c813ac86aba0a5
+SHA512 (EasyRSA-3.2.3.tgz) = 708f6e54c15803fdaadd235e1ad4c06502bbd0591649872f34acf97f162c2d0f105b30103c625bdb8acf8efae1babff0f1cac84d148f61c5afea12c46f3c3da7
+Size (EasyRSA-3.2.3.tgz) = 88015 bytes
 SHA1 (patch-easyrsa) = cc44e86031c875f102e140cea9582e4d88789b20
 SHA1 (patch-vars.example) = 6148e15e404da398b9e04064f3195b60361339e9