Please correct build-dh.bat

alex.limbeck

I just downloaded the last openvpn-install-2.3.17-I001-i686.exe (for Windows XP)

I am following this guide:
https://openvpn.net/index.php/open-source/documentation/howto.html#pki

But when I start build-dh.bat I obtain this warning:
WARNING: can't open config file: /etc/ssl/openssl.cnf

I found the solution is to set OPENSSL_CONF with this command:
set OPENSSL_CONF=%HOME%\openssl-1.0.0.cnf

Can You please update the build-dh.bat file ?

TinCanTech

I would recommend EasyRSA-3.0.1-rc2

Available here: https://github.com/OpenVPN/easy-rsa/releases

alex.limbeck

I am now using EasyRSA-3.0.1-rc2, but I see the same warning:

openssl dhparam -out %KEY_DIR%/dh%KEY_SIZE%.pem %KEY_SIZE%
WARNING: can't open config file: /etc/ssl/openssl.cnf

TinCanTech

That problem is hard coded into openssl.exe

You can copy the file ..\openvpn\easy-rsa\openssl-1.0.0.cnf to \etc\ssl\openssl.cnf

I doubt it will ever be fixed in that version of openssl ..

ArmandoB

TinCanTech wrote That problem is hard coded into openssl.exe

You can copy the file ..\openvpn\easy-rsa\openssl-1.0.0.cnf to \etc\ssl\openssl.cnf

I doubt it will ever be fixed in that version of openssl ..

Fair enough, I'm still having the issue so I gues it wil never get fixed. 🙁