What's Changed

• Replace local / global openssl-easyrsa.cnf by @TinCanTech in #1394
• init-pki: Introduce configurable cryptography by @TinCanTech in #1397
• Drop x509 type kdc built-in by @TinCanTech in #1399
• Always generate an openssl-easyrsa.cnf or x509-types tmp-file by @TinCanTech in #1401
• Libressl use $EASYRSA_FORCE_SAFE_SSL by @TinCanTech in #1402
• Update EasyRSA-Advanced.md by @TinCanTech in #1403
• source_vars(): Add grep regex for assign by equal = by @TinCanTech in #1405
• export_pkcs(), PKCS12 inline: Respect $EASYRSA_NO_INLINE by @TinCanTech in #1407
• Introduce peer-fingerprint inline lists by @TinCanTech in #1410
• help: Add '-b' alias for --batch and correct default 'vars' file by @TinCanTech in #1411
• New function ssl_cert_sig_digest(); Extract certificae digest name by @TinCanTech in #1414
• Upgrading OpenSSL for Windows to 3.6.0 by @ecrist in #1416

Full Changelog: v3.2.4...v3.2.5