You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While switching default from RSA to EC is probably a little too intrusive, making it easier to setup easyrsa to use EC-by-default on a given PKI is simple and useful.
eg:
easyrsa init-pki-ec
Which would pre-configure EASYRSA_ALGO=ec and EASYRSA_CURVE=secp384r1.
Allowing cascading vars files, so that the PKI vars file always comes first and then one other Globalvars file can be sourced, appears to be suitable.