The reason for this error can be found in the whichopensslcnf itself:
it interprets the output auf "openssl version". In current versions (like in Debian 9.3.0) it is V1.1.X so the output is like this:
:~$ openssl version
OpenSSL 1.1.0f 25 May 2017
So simply do that and it will work:
nano /etc/openvpn/easy-rsa/whichopensslcnf
Add the following lines:
elif $OPENSSL version | grep -E "1\.1\.[[:digit:]][[:alnum:]]?" > /dev/null$
cnf="$1/openssl-1.0.0.cnf"
Then save.
Next time it will find it at least at my system.
I'm not too familiar with the code of "openssl-1.0.0.cnf" and currently cannot answer the question if the cnf is fully compatible with OpenSSL 1.1.X or if there better should be a "
openssl-1.1.0.cnf". At least I couldn't figure out a problem yet if doing it like described above.
Kind regards
MM
