On Fri, Feb 16, 2024 at 03:20:25PM +0100, Frank Lichtenheld wrote:
> Note that none of this negates the usefulness of easy-rsa. This
> is specifically about the usefulness of easy-rsa bundled in the
> openvpn Windows installer.

Yeah, this.  I find easy-rsa very useful - but my CAs are not running
on a Windows system (the thought alone makes me shiver) but securely
tucked away on a Unix VM, with easy-rsa, of course.

So, for my environment (various customer deployments plus my own
dabbling) I do not need easy-rsa on Windows, and wouldn't miss it
if you (as in "the installer maintaining folks") decided to drop it.

I seem to remember that we did this split on the unix side some
100 years ago already - so now distributions have "openvpn" and
"easy-rsa" packages, and both can be updated and maintained according
to their own needs...


"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

Openvpn-devel mailing list

Reply via email to