Created attachment 306545 [details] easy-rsa-9999.ebuild @Bug Wranglers: please assign to net-misc/openvpn maintainer. easy-rsa is being split out from openvpn as a standalone package. Final repository is unknown, I will update. In the mean time attached an ebuild for easy-rsa out of my own repository to allow not to break people's configuration.
Created attachment 306547 [details, diff] easy-rsa-2.0.0-pkcs11.patch
Created attachment 310909 [details] easy-rsa-9999.ebuild
Created attachment 310911 [details] 65easy-rsa
Now in final repository.
djc: any reason why this is assigned to maintainer-wanted and not to openvpn maintainer?
The reason is that I hadn't seen it.
Is the 2.1.0 download in the repository supposed to make a release? I'd rather start with releases for this than doing a -9999. If 2.1.0 is a release, perhaps there should also be tags?
Oh... you can wait for release. No problem. I've put this as if you install the openvpn-9999 then you won't have easy-rsa... so if you want to keep this around you would like also this one.
Yeah, I figured that out. But openvpn still works without easy-rsa, right, it's just a convenience tool to create the keys?
(In reply to comment #9) > Yeah, I figured that out. But openvpn still works without easy-rsa, right, > it's just a convenience tool to create the keys? Right! Because of this I split it out... :)
afaik 2.2.0 tag is done 7 months ago so we should start shipping this package. Is crypto@ interested in this?
This was split from openvpn project, I am not sure there us any benefit in distributing this package, as all you do is download it extract it at working directory and you are done. It has no real sense FHS, for example managing data at /var...
(In reply to comment #12) > This was split from openvpn project, I am not sure there us any benefit in > distributing this package, as all you do is download it extract it at > working directory and you are done. > > It has no real sense FHS, for example managing data at /var... That's fine but at least add an elog message on the openvpn package saying that easy-rsa is not part of openvpn anymore and that we need to install it ourselves (and not installed by the openvpn ebuild) so those of us who maintain openvpn servers know how/where to find the easy-rsa scripts.
An elog message would be nice. Also please someone fix the wiki: http://en.gentoo-wiki.com/wiki/OpenVPN I've just gotten a little confused searching the entire filesystem for the easy-rsa scrips (I thought the location had changed and only after some time found this bug as the reason why they're nowhere to be found)
(In reply to comment #14) > An elog message would be nice. Also please someone fix the wiki: > http://en.gentoo-wiki.com/wiki/OpenVPN We have no control over that wiki. You need to create an account and fix it yourself. Just a note, the official Gentoo wiki is located at http://wiki.gentoo.org
In tree, thanks for the patches! Keywording in bug 453782. I'll add a message to openvpn-2.3.0 now.
Hmm, should we make easy-rsa block <openvpn-2.3?
(In reply to comment #17) > Hmm, should we make easy-rsa block <openvpn-2.3? yes.
Done. Thanks!
