export-p12 fails when EASYRSA_DISABLE_INLINE=1

[seblu]

Description

When EASYRSA_DISABLE_INLINE=1 is set in the PKI’s vars file, export-p12 fails because it still attempts to generate/use an inline p12 file.

Command

EASYRSA_PKI=foo ./easyrsa --passout=pass: export-p12 bar

Error

Using Easy-RSA 'vars' configuration:
* foo/vars
./easyrsa: line 3737: foo/inline/private/bar.inline-p12: No such file or directory

Easy-RSA error:

export_pkcs - make inline

EasyRSA Version Information
Version:     3.2.4
Generated:   lun. 03 nov. 2025 17:13:27 CET
SSL Lib:     OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1 Oct 2025)
Git Commit:  84be9c631c1efb872ff8cc9f16b9af4e7f018af3
Source Repo: https://github.com/OpenVPN/easy-rsa
Host: 3.2.4 | nix | Linux | /bin/zsh

Expected

With EASYRSA_DISABLE_INLINE=1, export-p12 should not attempt to use or create any inline files.

Possible Cause

The p12 export logic (export_pkcs) does not check EASYRSA_DISABLE_INLINE and tries to use an inline .inline-p12 path, which does not exist when inline support is disabled.

[TinCanTech]

@seblu Thanks for this report, I confirm this is a bug.

[TinCanTech]

FTR: $EASYRSA_DISABLE_INLINE has been replaced by $EASYRSA_NO_INLINE.

$EASYRSA_DISABLE_INLINE will still work but you will get a nag message.