{"id":17320450,"url":"https://github.com/tincantech/easy-tls","last_synced_at":"2025-04-12T23:45:18.895Z","repository":{"id":43440656,"uuid":"247311632","full_name":"TinCanTech/easy-tls","owner":"TinCanTech","description":"Manage and Inline OpenVPN TLS keys and Easy-RSA PKI credentials. Supports OpenVPN TLS-Crypt-V2 key system and OpenVPN Peer-Fingerprint mode.","archived":false,"fork":false,"pushed_at":"2025-04-07T20:20:21.000Z","size":6306,"stargazers_count":93,"open_issues_count":33,"forks_count":20,"subscribers_count":10,"default_branch":"master","last_synced_at":"2025-04-12T23:45:07.053Z","etag":null,"topics":["automation","certificates","cryptography","easyrsa","inline","keys","openvpn","openvpn-peer-fingerprint","openvpn-tls-crypt-v2","shell-script","tls","vpn","x509"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TinCanTech.png","metadata":{"files":{"readme":".github/README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"custom":["https://paypal.me/richardTbonhomme"]}},"created_at":"2020-03-14T16:24:11.000Z","updated_at":"2025-04-07T20:20:25.000Z","dependencies_parsed_at":"2024-07-20T02:15:48.554Z","dependency_job_id":"5cb16d3e-b66d-4547-b1f4-c70fb814a8f0","html_url":"https://github.com/TinCanTech/easy-tls","commit_stats":null,"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TinCanTech%2Feasy-tls","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TinCanTech%2Feasy-tls/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TinCanTech%2Feasy-tls/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TinCanTech%2Feasy-tls/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TinCanTech","download_url":"https://codeload.github.com/TinCanTech/easy-tls/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248647260,"owners_count":21139081,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","certificates","cryptography","easyrsa","inline","keys","openvpn","openvpn-peer-fingerprint","openvpn-tls-crypt-v2","shell-script","tls","vpn","x509"],"created_at":"2024-10-15T13:31:21.321Z","updated_at":"2025-04-12T23:45:18.873Z","avatar_url":"https://github.com/TinCanTech.png","language":"Shell","readme":"[![CI](https://github.com/TinCanTech/easy-tls/actions/workflows/blank.yml/badge.svg)](https://github.com/TinCanTech/easy-tls/actions/workflows/blank.yml)\n# Easy-TLS\n\nFrom that list above, the only file which you need is: [**`easytls`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls)\n\n## Standard Features\nEasy-TLS is an Easy-RSA extension utility to help manage:\n+ Easy-RSA based x509 security credentials\n+ OpenVPN specific TLS keys\n+ Verified **`Inline`** files for use with OpenVPN\n+ Concise OpenVPN TLS-Crypt-V2 Client Key Metadata definition\n+ X509 Certificate **and matched** Easy-TLS Inline-file Expiry management tools\n+ Substantial **Inter-active Menus**\n\n## Additional Features\nEasy-TLS also supports No-CA mode, which does not require an Easy-RSA CA:\n+ Use Easy-TLS to build **self-signed** X509 Certificates and keys.\n\n### Installation\nDownload: [**`easytls`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls) to your `easyrsa3` working directory.\n\nFor full support, you will also need these scripts for use by your OpenVPN Server:\n+ [**`easytls-cryptv2-verify.sh (1)`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls-cryptv2-verify.sh) - **Can be used stand-alone**\u003cbr\u003e\n  Used by Openvpn-Server to enforce TLS-Crypt-V2 `metadata` access policy rules.\u003cbr\u003e\n\n+ [**`easytls-client-connect.sh (2)`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls-client-connect.sh) - **Requires script `(1)(3)`**\u003cbr\u003e\n  Used by Openvpn-Server to enforce `TLS-Key-type` and `address-filter` access policy rules.\u003cbr\u003e\n\n+ [**`easytls-client-disconnect.sh (3)`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls-client-disconnect.sh) - **Requires script `(1)(2)`**\u003cbr\u003e\n  This Disconnect script is **required by** the Connect script.\n\n+ Optional - [**`easytls-conntrac.lib`**](https://github.com/TinCanTech/easy-tls/blob/master/easytls-conntrac.lib) - **Requires script `(1)(2)(3)`**\u003cbr\u003e\n  Connection tracking plug-in, required for optional connection tracking.\n\n### Environment\n**`easytls`** is intended to work **everywhere** that **`openvpn`** and **`easyrsa`** work.\n\n### Requirements\n+ Easy-RSA Version 3.0.6+\n+ OpenVPN Version 2.5.0+\n\n### Support\nPlease use the issues section here on github.\u003cbr\u003e\nFor live support you can use IRC channel: **libera.chat/#easytls**\u003cbr\u003e\nWiki: https://github.com/TinCanTech/easy-tls/wiki\u003cbr\u003e\nHowto: https://github.com/TinCanTech/easy-tls/blob/master/EasyTLS-Howto-ii.md\u003cbr\u003e\n\n## Acknowledgements\nEasy-TLS is *written in the style of* and *borrows heavily from* Easy-RSA\u003cbr\u003e\nSee: https://github.com/OpenVPN/easy-rsa\u003cbr\u003e\n**Note:**\u003cbr\u003e\nThis is intended to facilitate maximum compatibility with Easy-RSA while extending functionality\u003cbr\u003e\nto include direct support for OpenVPN specific TLS keys and Inline credentials.\u003cbr\u003e\n\n### Easy-TLS is inspired by **syzzer**\u003cbr\u003e\nSee: https://github.com/OpenVPN/openvpn/blob/master/doc/tls-crypt-v2.txt\u003cbr\u003e\n\nI hope that you find Easy-TLS to be a useful tool.\n\n","funding_links":["https://paypal.me/richardTbonhomme"],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftincantech%2Feasy-tls","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftincantech%2Feasy-tls","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftincantech%2Feasy-tls/lists"}