Create certs without keyboard input

caldwellglobal

Looking to upgrade a system from EasyRsa 2 to EasyRsa 3. In testing with ./easyrsa, it seems to REQUIRE hitting the Enter key at the very least.

I tried searching but so far haven't found a way to do a pure CLI entry which will create a cert/client without having to hit enter. For scripting purposes, we set up the old with a variety of the pkitool command to not require input.

Is that possible here?

caldwellglobal

Also, if there is no way to automate use of easyrsa 3, is there any practical reason that 2 should not be run?

TinCanTech

Option --batch

You will also need to upgrade your version 2 PKI to version 3:

./easyrsa upgrade pki|ca

You may also like to try:
https://github.com/TinCanTech/easy-tls

Which comes with fully inter-active menus, so you don't need to read so much.

Testing and feedback welcome 8-)