Page 1 of 1
2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 11:31 am
by maxburn
Gave my first try with 2.5 this morning with rc2. Made absolutely sure I selected all install options except for the GUI utility which I don't want on a server. Right off the bat trying to generate keys with
the instructions I've used many times before and the scripts I'm looking for are not to be found.
I looked around and found the
same instructions in the 2x HOW TO and they start off the same way, but the scripts mentioned are missing.
Re: 2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 12:54 pm
by TinCanTech
You have installed EasyRSA-3 not version 2.
Once you have EasyRSA working you can also try
EasyTLS
Re: 2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 4:02 pm
by maxburn
Thanks, I didn't read carefully enough. From the 2x page a little further up from where I usually start reading;
For PKI management, we will use easy-rsa 2, a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you’re using OpenVPN 2.3.x, you need to download easy-rsa 2 separately from here.
For PKI management, we will use easy-rsa 2, a set of scripts which is bundled with OpenVPN 2.2.x and earlier. If you’re using OpenVPN 2.3.x, you may need to download easy-rsa 2 separately from the easy-rsa-old project page. An easy-rsa 2 package is also available for Debian and Ubuntu in the OpenVPN software repos. On *NIX platforms you should look into using easy-rsa 3instead; refer to its own documentation for details.
Re: 2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 4:26 pm
by TinCanTech
maxburn wrote: ↑Tue Oct 13, 2020 11:31 am
Gave my first try with 2.5 this morning with rc2.
RC2 means it is a test version not a full release.
2.5 now ships with EasyRSA-3, which has it's own web site:
https://github.com/OpenVPN/easy-rsa
Re: 2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 9:04 pm
by maxburn
Thanks, yes I was checking things out and seeing what I need to change in my processes to move up to the 2.5+ versions eventually coming out. Also just found this doc re EasyRSA-3.
https://community.openvpn.net/openvpn/w ... nVPN-Howto
I can see how that's more secure but it's a big process departure from EasyRSA-old. Also potentially a problem when my VPN client is a Ubiquiti Edgerouter. I'll have to give it a try.
Re: 2.5rc2 missing easyrsa init.config, vars, clean-all, etc scripts
Posted: Tue Oct 13, 2020 10:32 pm
by TinCanTech
EasyRSA-3 can upgrade your EasyRSA-2 PKI .. Please make a full backup first.
Then, give it a shot!
Let me know how you get on
