Skip to content

New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE #1364

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 1, 2025
Merged

New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE #1364

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
46c8647
New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE
TinCanTech Jul 1, 2025
9f01eb1
ChangeLog: New global option: --no-lockfile
TinCanTech Jul 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions ChangeLog
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@ Easy-RSA 3 ChangeLog

3.2.4 (TBD)

* New global option: --no-lockfile = env-var: $EASYRSA_NO_LOCKFILE (46c8647) (#1364)
* default_overview(): Add peer-fingerprint mode PKI identification (c9a0152) (#1363)
* help: Add in use algorithm and key-size/curve to top level status (10778cc) (#1363)
* help: Move 'utils' to command list and detailed help (e965234) (#1363)
Expand Down
7 changes: 6 additions & 1 deletion easyrsa3/easyrsa
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,7 @@ Global options:
--force-safe-ssl: Always generate a safe SSL config file
(Default: Generate Safe SSL config once per instance)

--no-lockfile : Disable lock-file (Useful for read-only PKI)
--tmp-dir=DIR : Declare the temporary directory
(Default temporary directory is the EasyRSA PKI directory)
--keep-tmp=NAME : Keep the original temporary session by name: NAME
Expand Down Expand Up @@ -5785,7 +5786,7 @@ verify_working_env() {
verbose "verify_working_env: BEGIN"

# Oppertunist PKI lock-file
request_lock_file
[ "$EASYRSA_NO_LOCKFILE" ] || request_lock_file

# For commands which 'require a PKI' and PKI exists
if [ "$require_pki" ]; then
Expand Down Expand Up @@ -6703,6 +6704,10 @@ while :; do
--pki-dir|--pki)
export EASYRSA_PKI="$val"
;;
--no-lockfile)
empty_ok=1
export EASYRSA_NO_LOCKFILE=1
;;
--tmp-dir)
export EASYRSA_TEMP_DIR="$val"
;;
Expand Down