CVS commit: pkgsrc/security/easy-rsa

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep  3 07:46:42 UTC 2025

Modified Files:
        pkgsrc/security/easy-rsa: Makefile distinfo

Log Message:
easy-rsa: updated to 3.2.4

3.2.4 (2025-08-27)

* build-ca: get_passphrase(), write passphrase directly to temp-file (0cb9cdd)
* create_legacy_stream(): Designate 'selfsign' as NOT user configurable (f564b1c)
* self_sign(): awk action, correct comment and reduce script (8e23ba3)
* forbid_selfsign(): Allow issuer certificate serial to be absent (09dffec)
  Original bug report: github-user topical
* self_sign(): Force use of Easy-RSA X509-type file 'selfsign' (7e39cc6)
* random: Use verify_working_env() to configure EASYRSA_OPENSSL (32eb73d)
* set_no_clobber(): Add simple error detection (0f93880)
* revoke: Archive request and private key files and expand help (79754da)
  Original bug report: github-user spacefreak86
* Remove 'easyrsa_mkdir()', use only 'mkdir' (5738f3d)
* help: Correct build-ca 'rawca' command option (0447f42)
* Windows easyrsa-shell-init.sh: Modernize prompt (5bf2e99)
* Windows UT: Update 'wop-test.sh' to latest 'easyrsa-shell-init.sh' (ea5b168)
* verify_openvpn(): Convert Windows path '\' to *nix path '/' (75a8fdd)
* verify_openvpn(): Windows, add check for 'openvpn.exe' (10c6267)
* gen-crl: Replace file-move with file-copy-preserve-attribs (4cc1d48)
* Windows easyrsa-shell-init.sh: Add non-fatal check for 'openvpn.exe' (bb78615)
* Windows easyrsa-shell-init.sh: Require confirmation for User-Home mode (bfa6cfd)
* Windows easyrsa-shell-init.sh: Allow Easy-RSA to use '\User\$HOME' (f194da5)
* mutual_exclusions(): Include basic checks for --startdate/--enddate (e1478c3)
* Windows easyrsa-shell-init.sh: Replace 'read -p' (49b2181)
* inline: Include missing OpenVPN TLS key to cause INCOMPLETE warning (d98eee6)
* Verbose: Make verbose messages command and function aware (7634b94)
* CI: Add OpenSSL-3.5.1-LTS and LibreSSL-4.1.0 to private test suite
* secure_session(): Remove unnecessary check for existing directory (1322177)
* all_legacy_files_v2(): Do not create PKI directory (b0260da)
* Replace PKI and CA initialisation flags with command switch flags (2bdf582)
* verify_working_env(): Move lock-file request to after PKI check (071405d)
* Move basic sanity checks to verify_working_env() (509a36e)
* New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE (46c8647)
* default_overview(): Add peer-fingerprint mode PKI identification (c9a0152)
* help: Add in use algorithm and key-size/curve to top level status (10778cc)
* help: Move 'utils' to command list and detailed help (e965234)
* Restructure help (65c2bce)
* export-p12: Split $p12_cipher_opts into respective parts (48bb8ee)
* export-p12: Move inline file to 'inline/private' folder (22cabcb)
* export-p12: Rename inline file extension to '.inline-p12' (22cabcb)


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/security/easy-rsa/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/security/easy-rsa/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/easy-rsa/Makefile
diff -u pkgsrc/security/easy-rsa/Makefile:1.20 pkgsrc/security/easy-rsa/Makefile:1.21
--- pkgsrc/security/easy-rsa/Makefile:1.20      Mon Jul 21 08:47:11 2025
+++ pkgsrc/security/easy-rsa/Makefile   Wed Sep  3 07:46:42 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.20 2025/07/21 08:47:11 adam Exp $
+# $NetBSD: Makefile,v 1.21 2025/09/03 07:46:42 adam Exp $
 
-DISTNAME=      EasyRSA-3.2.3
+DISTNAME=      EasyRSA-3.2.4
 PKGNAME=       ${DISTNAME:S/EasyRSA/easy-rsa/}
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=OpenVPN/}

Index: pkgsrc/security/easy-rsa/distinfo
diff -u pkgsrc/security/easy-rsa/distinfo:1.21 pkgsrc/security/easy-rsa/distinfo:1.22
--- pkgsrc/security/easy-rsa/distinfo:1.21      Mon Jul 21 08:47:11 2025
+++ pkgsrc/security/easy-rsa/distinfo   Wed Sep  3 07:46:42 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.21 2025/07/21 08:47:11 adam Exp $
+$NetBSD: distinfo,v 1.22 2025/09/03 07:46:42 adam Exp $
 
-BLAKE2s (EasyRSA-3.2.3.tgz) = 08d4c9589cbf2905eee01b86147a194a3b2a8f16977898efc6c813ac86aba0a5
-SHA512 (EasyRSA-3.2.3.tgz) = 708f6e54c15803fdaadd235e1ad4c06502bbd0591649872f34acf97f162c2d0f105b30103c625bdb8acf8efae1babff0f1cac84d148f61c5afea12c46f3c3da7
-Size (EasyRSA-3.2.3.tgz) = 88015 bytes
+BLAKE2s (EasyRSA-3.2.4.tgz) = 926a92f47a9e19bb9926e8342e6e1f0f20b12a85ba8c7208819ba6eccbf707b5
+SHA512 (EasyRSA-3.2.4.tgz) = 3fadf1468aa1a11cf01d0f4768eb7ffa1f522c0021831aa448ffb1e3e76c5a6681ddcd879e570e54f8f79a35269bd19510fc8f51f54a0feb6982d9593af00208
+Size (EasyRSA-3.2.4.tgz) = 89360 bytes
 SHA1 (patch-easyrsa) = cc44e86031c875f102e140cea9582e4d88789b20
 SHA1 (patch-vars.example) = 6148e15e404da398b9e04064f3195b60361339e9