[Solved]Ubuntu Server 12.04 issues with creating certificate

realmrealm

Ubuntu Server 12.04 64bit (fully updated)
openvpn ver. 2.2.1-8ubuntu1

I'm sorry if this is too much info, but from start to issue here is what I've done.....

I was able to install openvpn properly:

sudo apt-get install openvpn

I then made a directory for easy-rsa:

mkdir /etc/openvpn/easy-rsa/

Then I copied the example stuff there:

cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/

Then I edited the vars file:

nano vars

Then when I try to run:

source vars

I get an error:

**************************************************************
  No /etc/openvpn/easy-rsa/openssl.cnf file could be found
  Further invocations will fail
**************************************************************

Which is expected because there is no openssl.cnf file

For some reason the "whichopensslcnf" script is not correctly pointing it to the "openssl-1.0.0.cnf" file. So in the vars file I pointed it there manually, so instead of it saying "whichopensslcnf" I made it say "openssl-1.0.0.cnf"

And then I ran:

source vars

And now I get an error of:

bash: /etc/openvpn/easy-rsa/openssl-1.0.0.cnf: Permission denied

I'm running as root, so that was not the issue, so I looked at the openssl-1.0.0.cnf file and saw it didn't have execute priviliges for the user (it was set at 644 so I changed it to 744)

And then I ran:

source vars

And I get these error messages:

/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 5: HOME: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 6: RANDFILE: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 7: openssl_conf: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 12: oid_section: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 13: engines: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 32: default_ca: command not found
dir: cannot access =: No such file or directory
dir: cannot access \:\:KEY_DIR: No such file or directory
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 38: certs: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 39: crl_dir: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 40: database: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 41: new_certs_dir: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 43: certificate: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 44: serial: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 45: crl: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 46: private_key: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 47: RANDFILE: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 49: x509_extensions: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 55: default_days: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 56: 30: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 57: default_md: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 58: preserve: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 63: policy: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 67: countryName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 68: stateOrProvinceName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 69: organizationName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 70: organizationalUnitName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 71: commonName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 72: name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 73: emailAddress: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 79: countryName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 80: stateOrProvinceName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 81: localityName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 82: organizationName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 83: organizationalUnitName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 84: commonName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 85: name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 86: emailAddress: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 90: default_bits: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 91: default_keyfile: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 92: distinguished_name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 93: attributes: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 94: x509_extensions: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 106: string_mask: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 111: syntax error near unexpected token `('
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 111: `countryName			= Country Name (2 letter code)'
NOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/keys

I'm following the guides that I've come accross and it does not seem like I'm missing a step, I'm sorry if this is a really dumb question, but I can't seem to find rhyme or reason as to why it is not working.

Any help you could throw my way would be appreciated.

Mimiko

You have to just comment out the line which calls "openssl.cnf" file.

drago1231

After copying the easy-rsa directory over, you will need to edit the 'whichopensslcnf' file. Going by the server guide (https://help.ubuntu.com/12.04/serverguide/openvpn.html) the beginning of the setup process will be as follows:

sudo apt-get install openvpn

sudo su
mkdir /etc/openvpn/easy-rsa/
cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/

nano /etc/openvpn/easy-rsa/whichopensslcnf

You will now need to remove all instances of '[[:alnum:]]' from the file. This will allow it to properly detect the version of OpenSSL on your computer. The completed text after the changes have been made should look like this:

#!/bin/sh

cnf="$1/openssl.cnf"

if [ "$OPENSSL" ]; then
	if $OPENSSL version | grep -E "0\.9\.6" > /dev/null; then
		cnf="$1/openssl-0.9.6.cnf"
	elif $OPENSSL version | grep -E "0\.9\.8" > /dev/null; then
		cnf="$1/openssl-0.9.8.cnf"
	elif $OPENSSL version | grep -E "1\.0\.[[:digit:]]" > /dev/null; then
                cnf="$1/openssl-1.0.0.cnf"
	else
		cnf="$1/openssl.cnf"
	fi
fi

echo $cnf

if [ ! -r $cnf ]; then
    echo "**************************************************************" >&2
    echo "  No $cnf file could be found" >&2
    echo "  Further invocations will fail" >&2
    echo "**************************************************************" >&2
fi

exit 0

You should now be able to continue on with the guide without issue. I hope this is helpful!

Regards,
Nik

realmrealm

@drago1231 - your solution worked perfectly. Thank you very much for your help.

binhnx

Hi all,

I'm using Ubuntu Server 12.04.02 for about 1-2 months (I'm a newbie). I have tried to install and config the OpenVPN and have exactly the same issue as realmrealm. After trying changing the 'whichopensslcnf' file as drago1231 said, I haved solved the error:

**************************************************************
  No /etc/openvpn/easy-rsa/openssl.cnf file could be found
  Further invocations will fail
**************************************************************

but I still have this error (the same as realmrealm):

/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 5: HOME: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 6: RANDFILE: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 7: openssl_conf: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 12: oid_section: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 13: engines: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 32: default_ca: command not found
dir: cannot access =: No such file or directory
dir: cannot access \:\:KEY_DIR: No such file or directory
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 38: certs: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 39: crl_dir: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 40: database: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 41: new_certs_dir: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 43: certificate: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 44: serial: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 45: crl: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 46: private_key: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 47: RANDFILE: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 49: x509_extensions: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 55: default_days: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 56: 30: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 57: default_md: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 58: preserve: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 63: policy: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 67: countryName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 68: stateOrProvinceName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 69: organizationName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 70: organizationalUnitName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 71: commonName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 72: name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 73: emailAddress: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 79: countryName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 80: stateOrProvinceName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 81: localityName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 82: organizationName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 83: organizationalUnitName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 84: commonName: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 85: name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 86: emailAddress: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 90: default_bits: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 91: default_keyfile: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 92: distinguished_name: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 93: attributes: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 94: x509_extensions: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 106: string_mask: command not found
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 111: syntax error near unexpected token `('
/etc/openvpn/easy-rsa/openssl-1.0.0.cnf: line 111: `countryName         = Country Name (2 letter code)'
NOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/keys

I have tried many other threads, searched google,... but I don't find the solution for this. Can anyone help me? I would be very appreciated!

danamir

rename openssl-1.0.0.cnf to openssl.cnf

mv ./openssl-1.0.0.cnf openssl.cnf