>>> easy-rsa: Building community/easy-rsa 3.2.5-r0 (using abuild 3.16.0-r0) started Mon, 02 Mar 2026 15:53:47 +0000
>>> easy-rsa: Validating /home/buildozer/aports/community/easy-rsa/APKBUILD...
>>> easy-rsa: Analyzing dependencies...
>>> easy-rsa: Installing for build: build-base openssl
(1/1) Installing .makedepends-easy-rsa (20260302.155351)
OK: 288.6 MiB in 107 packages
>>> easy-rsa: Cleaning up srcdir
>>> easy-rsa: Cleaning up pkgdir
>>> easy-rsa: Cleaning up tmpdir
>>> easy-rsa: Fetching https://distfiles.alpinelinux.org/distfiles/edge/easy-rsa-3.2.5.tar.gz
Connecting to distfiles.alpinelinux.org (172.105.82.32:443)
wget: server returned error: HTTP/1.1 404 Not Found
>>> easy-rsa: Fetching easy-rsa-3.2.5.tar.gz::https://github.com/OpenVPN/easy-rsa/archive/v3.2.5.tar.gz
Connecting to github.com (20.26.156.215:443)
Connecting to codeload.github.com (20.26.156.216:443)
saving to '/var/cache/distfiles/easy-rsa-3.2.5.tar.gz.part'
easy-rsa-3.2.5.tar.g 49172 --:--:-- ETA
easy-rsa-3.2.5.tar.g 2136k --:--:-- ETA
easy-rsa-3.2.5.tar.g 100% |********************************| 7511k  0:00:00 ETA
'/var/cache/distfiles/easy-rsa-3.2.5.tar.gz.part' saved
/var/cache/distfiles/easy-rsa-3.2.5.tar.gz: OK
>>> easy-rsa: Fetching https://distfiles.alpinelinux.org/distfiles/edge/easy-rsa-3.2.5.tar.gz
/var/cache/distfiles/easy-rsa-3.2.5.tar.gz: OK
>>> easy-rsa: Unpacking /var/cache/distfiles/easy-rsa-3.2.5.tar.gz...

Easy-RSA 3 global option and command overview.

NOTE: Global options MUST be provided before the command.

Global options:

--version       : Prints EasyRSA version and build information
--verbose|-v    : Enable verbose output
--batch|-b      : Set automatic (no-prompts when possible) mode
--silent|-s     : Disable all warnings, notices and information
--silent-ssl|-S : Silence SSL output (Requires batch mode)

--nopass|no-pass: Do not use passwords
                  Can NOT be used with --passin or --passout
--passin=ARG    : Set -passin ARG for openssl (eg: pass:xEasyRSAy)
--passout=ARG   : Set -passout ARG for openssl (eg: pass:xEasyRSAy)
--rawca|raw-ca  : Build CA with password via RAW SSL input

--pki=DIR       : Declare the PKI directory
                  (Default PKI directory is sub-directory 'pki')
                  See Advanced.md for in depth usage.
--vars=FILE     : Define a specific 'vars' file to use for Easy-RSA config
                  (Default vars file is in the current working PKI)

--umask=ARG     : Define a UMASK (Default 077)
--no-umask      : Do not use a UMASK, fall back to file system default.
--ssl-cnf=FILE  : Define a specific OpenSSL config file for Easy-RSA to use
                  (Default config file is in the EasyRSA PKI directory)
--force-safe-ssl: Always generate a safe SSL config file
                  (Default: Generate Safe SSL config once per instance)
--force-vars    : Ignore known errors in 'vars' file
--no-lockfile   : Disable lock-file (Useful for read-only PKI)
--no-inline     : Disable inline file creation
--tmp-dir=DIR   : Declare the temporary directory
                  (Default temporary directory is the EasyRSA PKI directory)
--keep-tmp=NAME : Keep the original temporary session by name: NAME
                  NAME is a sub-directory of the dir declared by --tmp-dir
                  This option ALWAYS over-writes a sub-dir of the same name.

Certificate & Request options: (these impact cert/req field values)

--text          : Create certificate requests with human readable text
--notext|no-text: Create certificates without human readable text
--days=#        : Sets the signing validity to the specified number of days
                  Applies to other commands. For details, see: 'help days'
--startdate=DATE: Sets the SSL option '-startdate' (Format '[YY]YYMMDDhhmmssZ')
--enddate=DATE  : Sets the SSL option '-enddate' (Format '[YY]YYMMDDhhmmssZ')

--digest=ALG    : Digest to use in the requests & certificates
--keysize=#     : Size in bits of keypair to generate (RSA Only)
--use-algo=ALG  : Crypto alg to use: choose rsa (default), ec or ed
--curve=NAME    : For elliptic curve, sets the named curve
                  (Default: algo ec: secp384r1, algo ed: ed25519)
                  (--use-algo and --curve can be used to configure 'init-pki')

--subca-len=#   : Path length of signed intermediate CA certificates
--copy-ext      : Copy included request X509 extensions (namely subjAltName)
                  For more info, see: 'easyrsa help copyext'

--san|--subject-alt-name=SUBJECT_ALT_NAME
                : Add a subjectAltName. Can be used multiple times.
                  For more info and syntax, see: 'easyrsa help altname'
--auto-san      : Use commonName as subjectAltName: 'DNS:commonName'
                  If commonName is 'n.n.n.n' then set 'IP:commonName'

--san-crit      : Mark X509v3 subjectAltName as critical
--bc-crit       : Add X509 'basicContraints = critical' attribute.
--ku-crit       : Add X509 'keyUsage = critical' attribute.
--eku-crit      : Add X509 'extendedKeyUsage = critical' attribute.

--new-subject='SUBJECT'
                : Specify a new subject field to sign a request with.
                  For more info and syntax, see: 'easyrsa help subject'

--usefn=NAME    : export-p12, set 'friendlyName' to NAME
                  For more, see: 'easyrsa help friendly'

Distinguished Name mode:

--dn-mode=MODE  : Distinguished Name mode to use 'cn_only' (Default) or 'org'

--req-cn=NAME   : Request commonName

  Distinguished Name Organizational options: (only used with '--dn-mode=org')
  --req-c=CC           : Country code (2-letters)
  --req-st=NAME        : State/Province
  --req-city=NAME      : City/Locality
  --req-org=NAME       : Organization
  --req-email=NAME     : Email addresses
  --req-ou=NAME        : Organizational Unit
  --req-serial=VALUE   : Entity serial number (Only used when declared)

Deprecated features:

--ns-cert             : Include deprecated Netscape extensions
--ns-comment=COMMENT  : Include deprecated Netscape comment (may be blank)


Command list:

  init-pki [ cmd-opts ]
  self-sign-server <file_name_base> [ cmd-opts ]
  self-sign-client <file_name_base> [ cmd-opts ]
  build-ca [ cmd-opts ]
  gen-dh
  gen-req <file_name_base> [ cmd-opts ]
  sign-req <type> <file_name_base> [ cmd-opts ]
  build-client-full <file_name_base> [ cmd-opts ]
  build-server-full <file_name_base> [ cmd-opts ]
  build-serverClient-full <file_name_base> [ cmd-opts ]
  inline <file_name_base>
  expire <file_name_base>
  renew-ca
  renew <file_name_base>
  revoke <file_name_base> [ cmd-opts ]          # DEPRECATED
  revoke-issued <file_name_base> [ cmd-opts ]   # REPLACEMENT
  revoke-expired <file_name_base> [ cmd-opts ]
  revoke-renewed <file_name_base> [ cmd-opts ]
  gen-crl
  update-db
  show-req <file_name_base> [ cmd-opts ]
  show-cert <file_name_base> [ cmd-opts ]
  show-ca [ cmd-opts ]
  show-crl
  show-expire <file_name_base> (Optional)
  show-revoke <file_name_base> (Optional)
  show-renew <file_name_base> (Optional)
  verify-cert <file_name_base>
  import-req <request_file_path> <short_name_base>
  export-p1 <file_name_base> [ cmd-opts ]
  export-p7 <file_name_base> [ cmd-opts ]
  export-p8 <file_name_base> [ cmd-opts ]
  export-p12 <file_name_base> [ cmd-opts ]
  set-pass <file_name_base> [ cmd-opts ]
  gen-tls-auth-key / gen-tls-crypt-key
  write <TYPE>
  serial|check-serial <SERIAL>
  display-dn <FORM> <DIR/FILE_NAME>
  show-eku <file_name_base>|<DIR/FILE_NAME>
  rand <Decimal-Number>

>>> easy-rsa: Entering fakeroot...
>>> easy-rsa-doc*: Running split function doc...
'usr/share/doc' -> '/home/buildozer/aports/community/easy-rsa/pkg/easy-rsa-doc/usr/share/doc'
>>> easy-rsa-doc*: Preparing subpackage easy-rsa-doc...
>>> easy-rsa-doc*: Running postcheck for easy-rsa-doc
>>> easy-rsa*: Running postcheck for easy-rsa
>>> easy-rsa*: Preparing package easy-rsa...
>>> easy-rsa-doc*: Tracing dependencies...
>>> easy-rsa-doc*: Package size: 43.5 KB
>>> easy-rsa-doc*: Compressing data...
>>> easy-rsa-doc*: Create checksum...
>>> easy-rsa-doc*: Create easy-rsa-doc-3.2.5-r0.apk
>>> easy-rsa*: Tracing dependencies...
	openssl
>>> easy-rsa*: Package size: 205.1 KB
>>> easy-rsa*: Compressing data...
>>> easy-rsa*: Create checksum...
>>> easy-rsa*: Create easy-rsa-3.2.5-r0.apk
>>> easy-rsa: Build complete at Mon, 02 Mar 2026 15:53:57 +0000 elapsed time 0h 0m 10s
>>> easy-rsa: Cleaning up srcdir
>>> easy-rsa: Cleaning up pkgdir
>>> easy-rsa: Uninstalling dependencies...
(1/1) Purging .makedepends-easy-rsa (20260302.155351)
OK: 288.6 MiB in 106 packages
>>> easy-rsa: Updating the community/ppc64le repository index...
>>> easy-rsa: Signing the index...