diff --git a/app-crypt/easy-rsa/Manifest b/app-crypt/easy-rsa/Manifest
index c7f9b3f9ce6f..235351812da8 100644
--- a/app-crypt/easy-rsa/Manifest
+++ b/app-crypt/easy-rsa/Manifest
@@ -1,2 +1,3 @@
 DIST easy-rsa-3.2.0.tar.gz 7033408 BLAKE2B ad1779d6eec3d3b36b7f1c13e73c29bbebe7709c0ef91da1b53482eeab01ad56335bf0ec7bc83331976df926dbb316fc35fc7b83934955c72c9c60b5ecb207f6 SHA512 410453cd170400fafa85547a49a2b4072683bd8c33fba64f81506cb571cd9da8c4c13d13108120c55541aabfe5ceaf3fd491d8f7105c5cc4e4082505777e8282
 DIST easy-rsa-3.2.1.tar.gz 7043742 BLAKE2B 7bc6d5534e47fed6b22de745b9d8ba579f1be49ad52a2d985d81cd1b2e22914b796c47b1a2aab8ca3944eaca37152c30d73659a200f870d1bff1a4bd87830557 SHA512 cdaf5167c31bfa506f7837e664837659a251f317ed3a5a1fcadd1ade4d25e4e8b855bccd3a8c26a14b87f65d8906990e01e87ffe4c6faad83bd008df3ebb3939
+DIST easy-rsa-3.2.2.tar.gz 7031565 BLAKE2B 61fba06dfd12105c0da6a61f1581c2e283c0033d849c593314a9a96d875ef0cd3e94abfc3650e681475d5ee8fd95b278e93ee836f7107d4a85037b566b90cafd SHA512 f17962729810155688909ad9bdbbec382e050eaccc6e816612457e5858ac25e7e2d142b6d8dc8a80e7d36064ae4a084552475cecf5dafefe8fc991b71fe2107f
diff --git a/app-crypt/easy-rsa/easy-rsa-3.2.2.ebuild b/app-crypt/easy-rsa/easy-rsa-3.2.2.ebuild
new file mode 100644
index 000000000000..0e1700ee508b
--- /dev/null
+++ b/app-crypt/easy-rsa/easy-rsa-3.2.2.ebuild
@@ -0,0 +1,25 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DESCRIPTION="Small RSA key management package, based on OpenSSL"
+HOMEPAGE="https://openvpn.net/"
+SRC_URI="https://github.com/OpenVPN/easy-rsa/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
+
+DEPEND=">=dev-libs/openssl-0.9.6:0="
+RDEPEND="${DEPEND}"
+
+src_install() {
+	exeinto /usr/share/easy-rsa
+	doexe easyrsa3/easyrsa
+	insinto /usr/share/easy-rsa
+	doins -r easyrsa3/{vars.example,openssl-easyrsa.cnf,x509-types}
+	dodoc README.quickstart.md ChangeLog
+	dodoc -r doc
+	doenvd "${FILESDIR}/65easy-rsa" # config-protect easy-rsa
+}