Hello,
I'm new here and searched for the internet and this site for answers but I didn't found the right one.
I'm trying to install OpenVPN on my Nas4Free system (UNIX) and using the easy-rsa to create certificates and keys.
The first thing I did was:
Start up Putty
and log on to my nas via ssh as root.
then
1. cd /mnt/Tank1
2. mkdir extensions
3. cd extensions
4. mkdir var
5. mkdir usr
6. mkdir tmp
7. mount_unionfs -o w /mnt/Tank1/extensions/usr/ /usr/
8. umount -f /var
9. mount_unionfs -o w /mnt/Tank1/extensions/var/ /var/
10. setenv PKG_TMPDIR /mnt/Tank1/extensions/tmp/
11. setenv PACKAGESITE "ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-9.1-release/All/"
12. pkg_add -rv openvpn-2.2.2
After that I've tryed to create certificates and keys with easy-rsa, but there is where i get stuck.
I copied the files from /mnt/Tank1/extensions/usr/local/share/doc/openvpn/easy-rsa/2.0/vars
to /etc/openvpn doing
1. cd /etc/openvpn
2. cp -R /mnt/tank1/extensions/usr/local/share/doc/openvpn/ ./
After that I made a copy of openssl-1.0.0.cnf and named it openssl.cnf and placed it in the same foldes as where the openssl-1.0.0.cnf is.
Followed by opening the webgui for my Nas4Free server and went to Advanced|File Editor
I went to /etc/openvpn/easy-rsa/2.0/vars
In the file editor I did:
1. # easy-rsa parameter settings
# NOTE: If you installed from an RPM,
# don't edit this file in place in
# /usr/share/openvpn/easy-rsa --
# instead, you should copy the whole
# easy-rsa directory to another location
# (such as /etc/openvpn) so that your
# edits will not be wiped out by a future
# OpenVPN package upgrade.
# This variable should point to
# the top level of the easy-rsa
# tree.
export EASY_RSA="`pwd`"
#
# This variable should point to
# the requested executables
#
export OPENSSL="openssl"
export PKCS11TOOL="pkcs11-tool"
export GREP="grep"
# This variable should point to
# the openssl.cnf file included
# with easy-rsa.
export KEY_CONFIG=`$EASY_RSA/openssl.cnf $EASY_RSA`
# Edit this variable to point to
# your soon-to-be-created key
# directory.
#
# WARNING: clean-all will do
# a rm -rf on this directory
# so make sure you define
# it correctly!
export KEY_DIR="$EASY_RSA/keys"
# Issue rm -rf warning
echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
# PKCS11 fixes
export PKCS11_MODULE_PATH="dummy"
export PKCS11_PIN="dummy"
# Increase this to 2048 if you
# are paranoid. This will slow
# down TLS negotiation performance
# as well as the one-time DH parms
# generation process.
export KEY_SIZE=1024
# In how many days should the root CA key expire?
export CA_EXPIRE=3650
# In how many days should certificates expire?
export KEY_EXPIRE=3650
# These are the default values for fields
# which will be placed in the certificate.
# Don't leave any of these fields blank.
export KEY_COUNTRY="NL"
export KEY_PROVINCE="NA"
export KEY_CITY="NA"
export KEY_ORG="OpenVPN"
export KEY_EMAIL="me@myhost.mydomain"
export KEY_EMAIL=mail@host.domain
export KEY_CN=changeme
export KEY_NAME=changeme
export KEY_OU=changeme
export PKCS11_MODULE_PATH=changeme
export PKCS11_PIN=1234
I saved my changes and went back to putty.
1. bash
2. chmod 777 vars
3. chmod 777 openssl.cnf
4. . ./vars
6. . ./clean-all
7. . ./build-ca
/etc/openvpn/easy-rsa/2.0/pkitool: openssl: not found
What should I do now? Should I change something in the build-ca file or in the pkitool file or something else.
