[Openvpn-users] easy-rsa questions

[Markus W. <bum...@go...>]

Hey List,

i want to use easy-rsa as a pkitool for my infrastructure but i have  
experienced a few things i don't understand.
First of all i encountered a weird behavior that i would call a bug.

# ./easyrsa build-server-full serverXY.domain.tld
always runs in batchmode, even on unchanged vars file, as it indicates
	#set_var EASYRSA_BATCH		0
batchmode is disabled. (btw. uncommenting it does the exactly the  
opposite. it turns batchmode on for every action.)

here is the part in the script:
  671
  672         # create request
  673         EASYRSA_REQ_CN="$name"
  674         gen_req "$name" batch $req_opts
  675
  676         # Sign it
  677         sign_req "$crt_type" "$name" batch
  678
  679 } # => build_full()

another thing i wonder is, is there a way to create a certificatechain  
 from easyrsa? especially when creating a subca. or do i have to cat the  
certs manually?

i hope you guys can help me. thx in advance
markus