Page 1 of 1

Did move the *.cnf file, is the keys still safe?

Posted: Wed Jul 19, 2017 4:01 pm
by Calby
Hi,
I'm running OpenVPN at my Windows Server 2016 Standard.
I did receive error's all the time regarding this when I did try to generate keys:
WARNING: can't open config file: /etc/ssl/openssl.cnf

I did try to un-install and re-install OpenVPN server but I did get the same error all the time.

So what I did was that I did move the "C:\Program Files\OpenVPN\easy-rsa\openssl-1.0.0.cnf" file to "C:\etc\ssl\" and I did rename it to openssl.cnf now I don't get any error messages and everything seems to work.

Is this good? or is my VPN connections at risk?

Re: Did move the *.cnf file, is the keys still safe?

Posted: Wed Jul 19, 2017 8:43 pm
by TinCanTech
There is no security risc associated with your work around (I did the same myself).

But you could upgrade to EasyRSA-3.0.0-rc2 which works correctly.
(That is the only version which will work with windows)

Re: Did move the *.cnf file, is the keys still safe?

Posted: Thu Jul 20, 2017 5:36 am
by Calby
TinCanTech wrote:There is no security risc associated with your work around (I did the same myself).

But you could upgrade to EasyRSA-3.0.0-rc2 which works correctly.
(That is the only version which will work with windows)
Ok, thanks!
What's up with that version, the 3.0.0-rc2 it has not been updated since 2014.