Skip to content

Conversation

@m-dilorenzi
Copy link
Collaborator

@m-dilorenzi m-dilorenzi commented Jan 26, 2026

This pull request introduces new functionality for managing OpenVPN tunnel certificates, particularly enabling regeneration of server and client certificates, and improves new certificates validity to 10 years. The changes add a new script for regenerating certificates, expose certificate expiry information, and standardize EasyRSA environment variable usage across scripts.

Certificate Management Improvements

  • Added a new script ns-openvpntunnel-regenerate-certs to regenerate server and client certificates for an OpenVPN tunnel, and updated the Makefile to install this script.
  • Introduced the regenerate_tunnel_certs function and corresponding API endpoint (regenerate-server-certs) in ns.ovpntunnel to allow certificate regeneration via API calls.

Certificate Expiry Handling

  • Implemented get_cert_expiry_ts utility and updated the tunnel listing API to include certificate expiry timestamps (cert_expiry_ts) in its responses when available.

Consistency and Cleanup in Certificate Scripts

  • Standardized the setting of EasyRSA environment variables (such as EASYRSA_BATCH and EASYRSA_CERT_EXPIRE) in all relevant certificate management scripts to ensure consistent certificate creation and renewal.

These changes improve the maintainability and usability of OpenVPN tunnel certificate management, making it easier to automate certificate renewal and monitor certificate validity through the API.

Refs: #1481

@m-dilorenzi m-dilorenzi requested a review from Tbaile January 26, 2026 12:38
@m-dilorenzi m-dilorenzi self-assigned this Jan 26, 2026
Copy link
Collaborator

@Tbaile Tbaile left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just bump package version and you're good to go

@Tbaile Tbaile linked an issue Jan 27, 2026 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

OpenVPN tunnel: Increase server and client certificate duration

4 participants