Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove conditional statements #319

Closed

Conversation

jameskirsop
Copy link
Contributor

Pull Request (PR) description

This PR removes the conditional statements around two environment variables so that they are always set. In doing so it allows the auto crl renewal process to succeed if either of the two options are missing in the openvpn::server declaration.

This Pull Request (PR) fixes the following issues

Fixes #318

@Dan33l
Copy link
Member

Dan33l commented Dec 11, 2018

Hi @jameskirsop all acceptance tests on nodes running EasyRSA v3 are failing.

IMO, the issue is that the command used in resource openvpn::server does not make the difference if the node use EasyRSA v2 or v3.
With EasyRSA v3, i tested the following command and it works like a charme:
. ./vars && EASYRSA_REQ_CN='' EASYRSA_REQ_OU='' openssl ca -gfncrl -out /etc/openvpn/test_openvpn_server/crl.pem -config /etc/openvpn/test_openvpn_server/easy-rsa/openssl.cnf

So the fix should be, with custom fact easyrsa, to take care of the EasyRSA version installed and then trigger the corresponding command.

Can you modify the PR in this way ?

@Dan33l Dan33l added needs-work not ready to merge just yet tests-fail labels Dec 11, 2018
@Dan33l
Copy link
Member

Dan33l commented Dec 13, 2018

If you need help fill free to ask. You can also join #voxpupuli on IRC and slack.

@Dan33l
Copy link
Member

Dan33l commented Dec 17, 2018

The issue is now closed by PR #321

@Dan33l Dan33l closed this Dec 17, 2018
@Dan33l Dan33l added skip-changelog and removed needs-work not ready to merge just yet labels Dec 17, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

crl auto renewal broken with easyrsa 3.0
2 participants