Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warning about moving vars to the PKI #1009

Closed
TinCanTech opened this issue Aug 29, 2023 · 2 comments
Closed

Warning about moving vars to the PKI #1009

TinCanTech opened this issue Aug 29, 2023 · 2 comments
Assignees
Labels
documentation feedback welcome Major Changes Changes between Major 3.X version numbers - X is Major Sticky Remain open

Comments

@TinCanTech
Copy link
Collaborator

TinCanTech commented Aug 29, 2023

If you see this warning about your vars file:

IMPORTANT:
  The preferred location for 'vars' is within the PKI folder.
  To silence this message move your 'vars' file to your PKI
  or declare your 'vars' file with option: --vars=<FILE>

Ignore this message, it will be removed in the next release.

Edit:

Please, do NOT put your vars file into your PKI.


The problem is due to setting EASYRSA or EASYRSA_PKI in the vars file.

First, establish if your vars file is Global or Local:

Global:

  • The vars file is NOT in the PKI.
  • EASYRSA and EASYRSA_PKI MUST NOT be set in the vars file. Otherwise, you have locked your vars file to a single PKI, which means it is not global.

Local:

  • The vars file is in the PKI.
  • EASYRSA and EASYRSA_PKI MUST NOT be set in the vars file. These settings are not compatible with a vars file in the PKI.

## Do NOT move your vars file to your PKI.

Note:
Setting EASYRSA and EASYRSA_PKI in the vars file is NOT recommended.
However, if you do set these variables in vars then it is still supported.

@TinCanTech TinCanTech self-assigned this Aug 29, 2023
@TinCanTech TinCanTech added documentation Major Changes Changes between Major 3.X version numbers - X is Major Sticky Remain open feedback welcome labels Aug 29, 2023
@TinCanTech TinCanTech pinned this issue Aug 29, 2023
@TinCanTech
Copy link
Collaborator Author

TinCanTech commented Aug 29, 2023

EasyRSA vars file is expected to be in the parent of the PKI.

Changing that in version 3.1.x has proven to be too intrusive.

Note:
EasyRSA has not made any changes to force vars in the PKI,
it has only added a warning to encourage that use.
That warning will be disabled for v3.1.7+.

#1008
#1014

@TinCanTech
Copy link
Collaborator Author

Follow-up: #1027

@TinCanTech TinCanTech unpinned this issue Jan 26, 2024
@TinCanTech TinCanTech pinned this issue Feb 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation feedback welcome Major Changes Changes between Major 3.X version numbers - X is Major Sticky Remain open
Projects
None yet
Development

No branches or pull requests

1 participant