Easy-RSA v3.2.2 most significant changes:

New command renew-ca: Basic CA renewal.
New command revoke-issed: This is to ensure that the correct certificate is selected for revocation.
Fold easyrsa-tools.lib into easyrsa: This marks the end of the existence of the tools library.

What's Changed

Bugfix-v321-01 by @TinCanTech in #1229
Remove redundant file: index.txt.attr by @TinCanTech in #1233
sign-req: Allow custom X509 Types by @TinCanTech in #1238
Add LibreSSL version 4 to supported SSL Libraries by @TinCanTech in #1240
Revoke remove private inline by @TinCanTech in #1244
Easyrsa disable inline by @TinCanTech in #1245
easyrsa-tools.lib: renew SAN, remove excess word 'Address' by @TinCanTech in #1251
easyrsa-tls.lib: renew, make sed regex for 'IP Address' greedy by @TinCanTech in #1253
Show expire allow zero days by @TinCanTech in #1254
easyrsa-tools.lib: New command 'renew ca' by @TinCanTech in #1255
Improve CRL expiration details by @TinCanTech in #1257
Tools move to easyrsa3 by @TinCanTech in #1260
vars.example: Remove $EASYRSA_PKI by @TinCanTech in #1262
Introduce new command revoke-issued by @TinCanTech in #1266
Bugfix renew ca and renew by @TinCanTech in #1267
Always use locate_support_files() after secure_session() by @TinCanTech in #1270
revoke: Make check for conflicting files less intrusive by @TinCanTech in #1272
Forbid a self-signed certificate from being expired/renewed/revoked by @TinCanTech in #1274
V321 minor final by @TinCanTech in #1275
op-test.sh: Disable download ossl3 and shellcheck binaries by @TinCanTech in #1284
Windows: Remove mktemp binary and text files by @TinCanTech in #1285
Revert da3c249: Do not remove index.txt.attr by @TinCanTech in #1287
Fold easyrsa-tools.lib into easyrsa by @TinCanTech in #1288

Full Changelog: v3.2.1...v3.2.2