From 6abaf59a236cb84c009c32d9142a03c853b5edb9 Mon Sep 17 00:00:00 2001
From: John E <44390932+jmeubank@users.noreply.github.com>
Date: Sun, 29 Mar 2020 14:33:08 -0700
Subject: [PATCH] Use original easy-rsa name instead of easy-rsa-auto
Co-Authored-By: randomshell <43271778+randomshell@users.noreply.github.com>
---
openvpn-install.sh | 28 ++++++++++++++--------------
1 file changed, 14 insertions(+), 14 deletions(-)
diff --git a/openvpn-install.sh b/openvpn-install.sh
index 0dd0921..20ddd68 100755
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -682,12 +682,12 @@ function installOpenVPN () {
local version="3.0.6"
wget -O ~/EasyRSA-unix-v${version}.tgz https://github.com/OpenVPN/easy-rsa/releases/download/v${version}/EasyRSA-unix-v${version}.tgz
tar xzf ~/EasyRSA-unix-v${version}.tgz -C ~/
- mkdir -p /etc/openvpn/easy-rsa-auto
- mv ~/EasyRSA-v${version}/* /etc/openvpn/easy-rsa-auto/
- chown -R root:root /etc/openvpn/easy-rsa-auto/
+ mkdir -p /etc/openvpn/easy-rsa
+ mv ~/EasyRSA-v${version}/* /etc/openvpn/easy-rsa/
+ chown -R root:root /etc/openvpn/easy-rsa/
rm -f ~/EasyRSA-unix-v${version}.tgz
- cd /etc/openvpn/easy-rsa-auto/ || return
+ cd /etc/openvpn/easy-rsa/ || return
case $CERT_TYPE in
1)
echo "set_var EASYRSA_ALGO ec" > vars
@@ -736,12 +736,12 @@ function installOpenVPN () {
else
# If easy-rsa is already installed, grab the generated SERVER_NAME
# for client configs
- cd /etc/openvpn/easy-rsa-auto/ || return
+ cd /etc/openvpn/easy-rsa/ || return
SERVER_NAME=$(cat SERVER_NAME_GENERATED)
fi
# Move all the generated files
- cp pki/ca.crt pki/private/ca.key "pki/issued/$SERVER_NAME.crt" "pki/private/$SERVER_NAME.key" /etc/openvpn/easy-rsa-auto/pki/crl.pem /etc/openvpn
+ cp pki/ca.crt pki/private/ca.key "pki/issued/$SERVER_NAME.crt" "pki/private/$SERVER_NAME.key" /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn
if [[ $DH_TYPE == "2" ]]; then
cp dh.pem /etc/openvpn
fi
@@ -1053,12 +1053,12 @@ function newClient () {
read -rp "Select an option [1-2]: " -e -i 1 PASS
done
- CLIENTEXISTS=$(tail -n +2 /etc/openvpn/easy-rsa-auto/pki/index.txt | grep -c -E "/CN=$CLIENT\$")
+ CLIENTEXISTS=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep -c -E "/CN=$CLIENT\$")
if [[ "$CLIENTEXISTS" = '1' ]]; then
echo ""
echo "The specified client CN was found in easy-rsa."
else
- cd /etc/openvpn/easy-rsa-auto/ || return
+ cd /etc/openvpn/easy-rsa/ || return
case $PASS in
1)
./easyrsa build-client-full "$CLIENT" nopass
@@ -1091,15 +1091,15 @@ function newClient () {
cp /etc/openvpn/client-template.txt "$homeDir/$CLIENT.ovpn"
{
echo ""
- cat "/etc/openvpn/easy-rsa-auto/pki/ca.crt"
+ cat "/etc/openvpn/easy-rsa/pki/ca.crt"
echo ""
echo ""
- awk '/BEGIN/,/END/' "/etc/openvpn/easy-rsa-auto/pki/issued/$CLIENT.crt"
+ awk '/BEGIN/,/END/' "/etc/openvpn/easy-rsa/pki/issued/$CLIENT.crt"
echo ""
echo ""
- cat "/etc/openvpn/easy-rsa-auto/pki/private/$CLIENT.key"
+ cat "/etc/openvpn/easy-rsa/pki/private/$CLIENT.key"
echo ""
case $TLS_SIG in
@@ -1141,8 +1141,8 @@ function revokeClient () {
read -rp "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER
fi
- CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa-auto/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p)
- cd /etc/openvpn/easy-rsa-auto/ || return
+ CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p)
+ cd /etc/openvpn/easy-rsa/ || return
./easyrsa --batch revoke "$CLIENT"
EASYRSA_CRL_DAYS=3650 ./easyrsa gen-crl
# Cleanup
@@ -1150,7 +1150,7 @@ function revokeClient () {
rm -f "pki/private/$CLIENT.key"
rm -f "pki/issued/$CLIENT.crt"
rm -f /etc/openvpn/crl.pem
- cp /etc/openvpn/easy-rsa-auto/pki/crl.pem /etc/openvpn/crl.pem
+ cp /etc/openvpn/easy-rsa/pki/crl.pem /etc/openvpn/crl.pem
chmod 644 /etc/openvpn/crl.pem
find /home/ -maxdepth 2 -name "$CLIENT.ovpn" -delete
rm -f "/root/$CLIENT.ovpn"