Best practice seems to conflict with pkitool

Support forum for Easy-RSA certificate management suite.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
tiptongrange
OpenVpn Newbie
Posts: 2
Joined: Wed Sep 02, 2015 2:04 pm

Best practice seems to conflict with pkitool

Post by tiptongrange » Wed Sep 02, 2015 4:07 pm

The instructions at the top of the /etc/easy-rsa/vars file recommend to copy the directory to /etc/openvpn/easy-rsa/ and work from there so that updates won't wipe out edits you've made, then source the vars file at the new location. However, the second line of the pkitool script is

. ./etc/easy-rsa/vars

which overwrites the previous source command and causes the build-key commands to use the original vars file instead of the new one. What would be the best practice to get around this problem?


I'm running OpenWRT Chaos Calmer r44596 which comes with openvpn-easy-rsa 2013-01-30-2 and openvpn-openssl 2.3.6-3 preinstalled.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Best practice seems to conflict with pkitool

Post by Traffic » Tue Sep 15, 2015 2:18 pm

tiptongrange wrote:What would be the best practice to get around this problem?
tiptongrange wrote:I'm running OpenWRT Chaos Calmer r44596 which comes with openvpn-easy-rsa 2013-01-30-2
Stay up to date with your software.

topic19629.html

Post Reply