Generating Blank Keys

Scripts to manage certificates or generate config files

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
itsmeryanb
OpenVpn Newbie
Posts: 1
Joined: Mon Dec 07, 2015 5:14 pm

Generating Blank Keys

Post by itsmeryanb » Mon Dec 07, 2015 5:50 pm

I'm very to new to this so any help is appreciated. I have OpenVPN installed and working with 3 Clients currently. I went in to generate a new key but am now getting an error along with 3 blank files. Typically, I generate the keys like this:

source ./vars

./build-key-pass clientname

(enter country and state abbreviations and enter for all the rest)

(sign cert)

From there, I can create the 3des.key and the .ovpn files. Instead, I now to get to the point where I run ./build-key-pass but it doesn't ask for me to sign and it just throws and error and generates blank files. Error is below.


root@raspberrypi:/etc/openvpn/easy-rsa# ./build-key-pass Client5
Generating a 1024 bit RSA private key
......++++++
........++++++
writing new private key to 'Client5.key'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [US]:us
State or Province Name (full name) [CA]:va
Locality Name (eg, city) [SanFrancisco]:
Organization Name (eg, company) [Fort-Funston]:
Organizational Unit Name (eg, section) [changeme]:
Common Name (eg, your name or your server's hostname) [Client5]:
Name [changeme]:
Email Address [mail@host.domain]:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from /etc/openvpn/easy-rsa/openssl-1.0.0.cnf
Error reading certificate request in Client5.csr
3069474000:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703: Expecting: CERTIFICATE REQUEST
root@raspberrypi:/etc/openvpn/easy-rsa# root@raspberrypi:/etc/openvpn/easy-rsa# ./build-key-pass Client5

Post Reply