[pivpn] Cant create profiles after fresh install

pbrinkhoff

hi,

i reinstalled openvpn with curl -L http://install.pivpn.io | bash
i'm using raspberrypi os lite 32-bit on a 3b+
after using pivpn -a i recieve this error message:

spawn ./easyrsa build-client-full test
* Notice:
Using Easy-RSA configuration from: /etc/openvpn/easy-rsa/pki/vars

* Notice:
Using SSL: openssl OpenSSL 1.1.1n  15 Mar 2022

Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/639f0255/temp.14de6a2f'
Enter PEM pass phrase:
1995558976:error:28078065:UI routines:UI_set_result_ex:result too small:../crypto/ui/ui_lib.c:905:You must type in 4 to 1024 characters
1995558976:error:2807106B:UI routines:UI_process:processing error:../crypto/ui/ui_lib.c:545:while reading strings
1995558976:error:0906406D:PEM routines:PEM_def_callback:problems getting password:../crypto/pem/pem_lib.c:59:
1995558976:error:0907E06F:PEM routines:do_pk8pkey:read key:../crypto/pem/pem_pk8.c:83:

Easy-RSA error:

Failed to generate request

Host: nix | Linux | /bin/bash

expect: spawn id exp4 not open
    while executing
"expect eof"
[2022-08-24T17:53:11+0100]: [ERROR]: Client Public Key Certificate not found: test.crt

openvpn_inc

Hi,

You had put this in the forum for "OpenVPN Connect (Windows)" but it seems to be an Easy-RSA question, so I moved it here.

I would very strongly recommend NOT running your Easy-RSA on a RPi. It's poor from a security standpoint in multiple ways. Maintain your Easy-RSA PKI on a regular computer. Even Windows is fine (although there I would probably use wsl.exe to provide a Linux environment.)

As an alternative, if you want an all-in-one VPN suite, consider Access Server:
https://openvpn.net/vpn-server-resources/install-openvpn-access-server-on-raspberry-pi/
The free version is limited to only two connections, but then, a Pi can't really handle much more than that anyway.

Oh, sorry, I guess you did say 32-bit. We don't have AS for 32-bit. Maybe your script author provides support through the github project page?

regards, rob0

TinCanTech

@ rob0 pivpn is a good tool for beginners to get to grips with running a VPN.

@ pbrinkhoff - The issue you are having has been reported to Pivpn here:
https://github.com/pivpn/pivpn/issues/1600

I am hoping to see a fix quite soon.

4s3ti

The issue with PiVPN has been fixed and pushed to PiVPN Master branch.