From ea440ad4a693b1630a431295b2d0e7478e992dac Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 14 Mar 2026 11:34:59 +0100
Subject: [PATCH] chore(deps): update dependency openvpn/easy-rsa to v3.2.6
 (#1480)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [OpenVPN/easy-rsa](https://redirect.github.com/OpenVPN/easy-rsa) |
patch | `3.2.5` → `3.2.6` |

---

### Release Notes

<details>
<summary>OpenVPN/easy-rsa (OpenVPN/easy-rsa)</summary>

###
[`v3.2.6`](https://redirect.github.com/OpenVPN/easy-rsa/releases/tag/v3.2.6):
3.2.6

[Compare
Source](https://redirect.github.com/OpenVPN/easy-rsa/compare/v3.2.5...v3.2.6)

#### What's Changed

- CI: Enable shell switch errexit by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1417](https://redirect.github.com/OpenVPN/easy-rsa/pull/1417)
- V325 326 minor touches by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1421](https://redirect.github.com/OpenVPN/easy-rsa/pull/1421)
- Inline sub ca v1 by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1423](https://redirect.github.com/OpenVPN/easy-rsa/pull/1423)
- X509-Type ca: Enable 'basicConstraints = critical' for CA/subCA
certificates by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1428](https://redirect.github.com/OpenVPN/easy-rsa/pull/1428)
- Import tls key v1 by
[@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1429](https://redirect.github.com/OpenVPN/easy-rsa/pull/1429)
- import\_tls\_key(): Use set\_no\_clobber() to preserve existing key
file by [@&#8203;TinCanTech](https://redirect.github.com/TinCanTech) in
[#&#8203;1430](https://redirect.github.com/OpenVPN/easy-rsa/pull/1430)

**Full Changelog**:
<https://github.com/OpenVPN/easy-rsa/compare/v3.2.5...v3.2.6>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/angristan/openvpn-install).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---
 openvpn-install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index a59c90d..e0b34c8 100755
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -9,8 +9,8 @@
 # Configuration constants
 readonly DEFAULT_CERT_VALIDITY_DURATION_DAYS=3650 # 10 years
 readonly DEFAULT_CRL_VALIDITY_DURATION_DAYS=5475  # 15 years
-readonly EASYRSA_VERSION="3.2.5"
-readonly EASYRSA_SHA256="662ee3b453155aeb1dff7096ec052cd83176c460cfa82ac130ef8568ec4df490"
+readonly EASYRSA_VERSION="3.2.6"
+readonly EASYRSA_SHA256="c2572990ce91112eef8d1b8e4a3b58790da95b68501785c621f69121dfbd22d7"
 
 # =============================================================================
 # Logging Configuration