Skip to content

[pull] master from angristan:master#114

Merged
pull[bot] merged 2 commits intonamibia:masterfrom
angristan:master
Mar 14, 2026
Merged

[pull] master from angristan:master#114
pull[bot] merged 2 commits intonamibia:masterfrom
angristan:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Mar 14, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

renovate bot and others added 2 commits March 14, 2026 11:34
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [OpenVPN/easy-rsa](https://redirect.github.com/OpenVPN/easy-rsa) |
patch | `3.2.5` → `3.2.6` |

---

### Release Notes

<details>
<summary>OpenVPN/easy-rsa (OpenVPN/easy-rsa)</summary>

###
[`v3.2.6`](https://redirect.github.com/OpenVPN/easy-rsa/releases/tag/v3.2.6):
3.2.6

[Compare
Source](https://redirect.github.com/OpenVPN/easy-rsa/compare/v3.2.5...v3.2.6)

#### What's Changed

- CI: Enable shell switch errexit by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1417](https://redirect.github.com/OpenVPN/easy-rsa/pull/1417)
- V325 326 minor touches by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1421](https://redirect.github.com/OpenVPN/easy-rsa/pull/1421)
- Inline sub ca v1 by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1423](https://redirect.github.com/OpenVPN/easy-rsa/pull/1423)
- X509-Type ca: Enable 'basicConstraints = critical' for CA/subCA
certificates by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1428](https://redirect.github.com/OpenVPN/easy-rsa/pull/1428)
- Import tls key v1 by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1429](https://redirect.github.com/OpenVPN/easy-rsa/pull/1429)
- import\_tls\_key(): Use set\_no\_clobber() to preserve existing key
file by [@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1430](https://redirect.github.com/OpenVPN/easy-rsa/pull/1430)

**Full Changelog**:
<OpenVPN/easy-rsa@v3.2.5...v3.2.6>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/angristan/openvpn-install).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
- Fix fingerprint CI test that started consistently failing after the
EasyRSA 3.2.6 update
- The client config was copied to `/shared/` before server cert renewal
changed the fingerprint, causing a TLS handshake failure race condition
- Instead of just fixing the race, add proper two-phase connectivity
testing: client connects before renewal, server renews certs, client
reconnects with the updated config
@pull pull bot locked and limited conversation to collaborators Mar 14, 2026
@pull pull bot added the ⤵️ pull label Mar 14, 2026
@pull pull bot merged commit 63448d5 into namibia:master Mar 14, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant