Skip to content
Switch branches/tags
This branch is 23 commits ahead, 329 commits behind OpenVPN:master.

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time


easy-rsa is a CLI utility to build and manage a PKI CA. In laymen's terms, this means to create a root certificate authority, and request and sign certificates, including sub-CAs and certificate revocation lists (CRL).


If you are looking for release downloads, please see the releases section on GitHub. Releases are also available as source checkouts using named tags.


For 3.x project documentation and usage, see the file or the more detailed docs under the doc/ directory. The .md files are in Markdown format and can be converted to html files as desired for release packages, or read as-is in plaintext.

Getting help using easy-rsa

Currently, Easy-RSA development co-exists with OpenVPN even though they are separate projects. The following resources are good places as of this writing to seek help using Easy-RSA:

The openvpn-users mailing list is a good place to post usage or help questions.

You can also try IRC at Freenode/#openvpn for general support or Freenode/#easyrsa for development discussion.

Branch structure

The easy-rsa master branch is currently tracking development for the 3.x release cycle. Please note that, at any given time, master may be broken. Feel free to create issues against master, but have patience when using the master branch. It is recommended to use a release, and priority will be given to bugs identified in the most recent release.

The prior 2.x and 1.x versions are available as release branches for tracking and possible back-porting of relevant fixes. Branch layout is:

master         <- 3.x, at present
v3.x.x            pre-release branches, used for staging branches

LICENSING info for 3.x is in the file

Code style, standards

We are attempting to adhere to the POSIX standard, which can be found here:


easy-rsa v3 fork which generates keys suitable for both OpenVPN and IPsec




No packages published