diff --git a/.github/workflows/update-easyrsa-hash.yml b/.github/workflows/update-easyrsa-hash.yml
index d3cff5c..8345c14 100644
--- a/.github/workflows/update-easyrsa-hash.yml
+++ b/.github/workflows/update-easyrsa-hash.yml
@@ -61,10 +61,13 @@ jobs:
 
       - name: Commit changes
         if: env.HASH_CHANGED == 'true'
+        env:
+          PAT: ${{ secrets.PAT }}
         run: |
           if ! git diff --quiet openvpn-install.sh; then
             git config user.name "github-actions[bot]"
             git config user.email "github-actions[bot]@users.noreply.github.com"
+            git remote set-url origin "https://x-access-token:${PAT}@github.com/${{ github.repository }}"
             git add openvpn-install.sh
             git commit -m "chore: update Easy-RSA SHA256 hash"
             git push
diff --git a/openvpn-install.sh b/openvpn-install.sh
index eb1fa80..02a57e8 100755
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -9,8 +9,8 @@
 # Configuration constants
 readonly DEFAULT_CERT_VALIDITY_DURATION_DAYS=3650 # 10 years
 readonly DEFAULT_CRL_VALIDITY_DURATION_DAYS=5475  # 15 years
-readonly EASYRSA_VERSION="3.2.4"
-readonly EASYRSA_SHA256="ed65e88cea892268efa71eb1161ce13af3beded6754301e1e713e36ff3613cac"
+readonly EASYRSA_VERSION="3.2.5"
+readonly EASYRSA_SHA256="662ee3b453155aeb1dff7096ec052cd83176c460cfa82ac130ef8568ec4df490"
 
 # =============================================================================
 # Logging Configuration