For what it's worth: here is a replacement to easy-rsa based on Python/OpenSSL.
https://github.com/nicolas314/2cca
Probably does not cover as much but at least it is not based on shell scripts and is all contained in a single file.
2cca lets you generate a root CA, server, and client certificates and keys. It also allows primitive CRL handling, allowing certificate revocation and CRL publication.
Would be glad to get feedback to see what is missing.
Hope it helps
Nicolas314
Alternative to easy-rsa
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
nicolas314
- OpenVpn Newbie
- Posts: 2
- Joined: Mon Dec 28, 2015 9:57 am
Re: Alternative to easy-rsa
Seems that pyopenssl is not available everywhere, e.g. not on openwrt. So I ported it to C with libcrypto (openssl) as single dependency. Same repository address as above.
Tested it on a Linux server + OSX client and works fine. I would appreciate if other people enlarge test coverage a bit and report!
Nicolas
Tested it on a Linux server + OSX client and works fine. I would appreciate if other people enlarge test coverage a bit and report!
Nicolas