freebsd-ports/security/easy-rsa/pkg-message
Matthias Andree 0a0dd568d8 security/easy-rsa: fix confusion of vars file
...and no longer package it as @sample. It is per-PKI, and easyrsa init-pki
will copy vars.example from the distribution, and create a PKI-local copy
named vars.  Should fix grembo@'s bug report [1]

add a new pkg-message file to explain this.

while here, add a convenience hardlink easy-rsa to the easyrsa wrapper,
to have an executable matching the package name.

PR:		264415
Reported by:	grembo@ (Michael Gmelin)
2022-06-02 23:29:43 +02:00

15 lines
704 B
Text

NOTE: easy-rsa will require you to initialize a pki ONLY UPON FIRST USE.
The packaging itself no longer does this because that would confuse easy-rsa,
and easy-rsa expects the vars not to be per-installation, but per-PKI.
ONLY for the very first run for a new PKI, do something such as:
easyrsa --pki-dir=~/my_new_pki init-pki # DANGEROUS - DESTROYS ~/my_new_pki
which will copy vars.example both into ~/my_new_pki
and create another copy named ~/my/new_pki/vars for you to edit for this PKI.
Then, edit ~/my/new_pki/vars to set the defaults.
After upgrades, use other commands, explained by running: easyrsa help.
to explain options such as --pki-dir (see above), run: easyrsa help options