Skip to content

Conversation

@akuzminsky
Copy link
Member

Tested in development, promoting encrypted CA support and CRL
auto-regeneration to sandbox for validation before production.

Changes:

  • Fix CRL regeneration with encrypted CA (OpenSSL 3.x pass: prefix)
  • Add monthly cron job with MAILTO notifications
  • Add syslog logging (openvpn-crl tag)
  • Add /etc/openvpn/README operational guide
  • Remove EASYRSA_NO_PASS from vars (CA is now encrypted)

  Tested in development, promoting encrypted CA support and CRL
  auto-regeneration to sandbox for validation before production.

  Changes:
  - Fix CRL regeneration with encrypted CA (OpenSSL 3.x pass: prefix)
  - Add monthly cron job with MAILTO notifications
  - Add syslog logging (openvpn-crl tag)
  - Add /etc/openvpn/README operational guide
  - Remove EASYRSA_NO_PASS from vars (CA is now encrypted)
@akuzminsky akuzminsky merged commit 85f958c into main Jan 21, 2026
2 checks passed
@akuzminsky akuzminsky deleted the openvpn-sandbox branch January 21, 2026 01:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants