This fails under OpenVPN-2.7.8-I001-amd64.msi. Rolled back to OpenVPN-2.7.7-I001-amd64.msi and works fine. While build-server-full does not work build-client-full does work.
`EasyRSA-Shell: # easyrsa build-server-full server nopass
Using Easy-RSA 'vars' configuration:
- C:/Program Files/OpenVPN/easy-rsa/vars
........+...+.......+.........+.....+++++++++++++++++++++++++++++++++++++++........+.+...............+..+.......+...+...+...........+...+...+...+.......+..+......+.+...+........+.......+.....+..........+++++++++++++++++++++++++++++++++++++++.+...+.......+......+...+..+...+.+......+..+.......+......+..............+...+.+.........+...........+.+...+...+..............+...................+.....+.+.....+......+.......+...+........+...................+.....+..........+.....+.............+..+.............+..+.+..+....+.....+......+...............+...+....+......+......+.....+....+..+....+.........+..+.......+..+....+......+.....................+..+......+...............+....+...+..+...+.......+..+....+..+...+...............++++++
.....+......+..+...+....+........+...+...+.......+...+++++++++++++++++++++++++++++++++++++++.......+..+....+..+...+..........+..+++++++++++++++++++++++++++++++++++++++.....+........+.+......+..............+.+...+..................+...+..+....+...+..+......+....+......+.....+...+............+.......+..+......+...+............+...+.....................+.+........+.......+..................+.....+.........+.+...........+....+.........+........+..........+.........+...........+...+.+......+............+..+.............+...+............+..+...+...+..........+...+..+..........+........+.+.....+..........+.....+.+.....+...+....+...+........+..........+..+.......+......+..+...............+...+.+.....+...+......+.......+.........+...+..+...+.......+.....+......+.......+..+...+...+.........+......+....+...+.....+.+...........+..........+.....................+........+.......+...+.....+....+...+..+.+.........+..+...+.......+.........+...........+....+...........+...+.+.........+..+...+...+...+.+...+......+.....+......+.+..................+......+...........+...+....+...+...+..............++++++
-----
Notice
Private-Key and Public-Certificate-Request files created.
Your files are:
- req: C:/Program Files/OpenVPN/easy-rsa/pki/reqs/server.req
- key: C:/Program Files/OpenVPN/easy-rsa/pki/private/server.key
You are about to sign the following certificate:
Requested CN: 'server'
Requested type: 'server'
Valid for: '7300' days
subject=
commonName = server
Type the word 'yes' to continue, or any other input to abort.
Confirm requested details: yes
Using configuration from C:/Program Files/OpenVPN/easy-rsa/pki/597f6820/temp.02
Enter pass phrase for C:/Program Files/OpenVPN/easy-rsa/pki/private/ca.key:
Could not find CA private key from C:/Program Files/OpenVPN/easy-rsa/pki/private/ca.key
84110000:error:1C800064😛rovider routines:ossl_cipher_unpadblock:bad decrypt:providers\implementations\ciphers\ciphercommon_block.c:107:
84110000:error:11800074😛KCS12 routines😛KCS12_pbe_crypt_ex:pkcs12 cipherfinal error:crypto\pkcs12\p12_decr.c:95:maybe wrong password
Easy-RSA error:
easyrsa_openssl - Command has failed:
- openssl ca -utf8 -batch -in C:/Program Files/OpenVPN/easy-rsa/pki/reqs/server.req -out C:/Program Files/OpenVPN/easy-rsa/pki/597f6820/temp.06 -extfile C:/Program Files/OpenVPN/easy-rsa/pki/597f6820/temp.05 -days 7300
EasyRSA Version Information
Version: 3.2.7
Generated: Sat Sep 19 07:53:26 CDT 2026
SSL Lib: OpenSSL 3.6.5 29 Sep 2026 (Library: OpenSSL 3.6.5 29 Sep 2026)
Git Commit: bab739d176a00f47819c79792863b13f4487b0c0
Source Repo: https://github.com/OpenVPN/easy-rsa
Host: 3.2.7 | win | @(#)MIRBSD KSH R39-w32-beta14 $Date: 2013/06/28 21:28:57 $ |
*** Easy-RSA has encountered a FATAL error, please report this.
user@server C:/Program Files/OpenVPN/easy-rsa
EasyRSA-Shell: # easyrsa build-client-full client4 nopass
Using Easy-RSA 'vars' configuration:
- C:/Program Files/OpenVPN/easy-rsa/vars
..............+.+.....+++++++++++++++++++++++++++++++++++++++...+..+.............+..+++++++++++++++++++++++++++++++++++++++.+..............+.........+.+..+.........+..........+...+......+.........+...+.....+....+...+........+.......+...+.....+...+....+..+...+.+.....+..........+.....+.+.....................+...+..............+............+...+......+................+...++++++
....+.....+....+...........+++++++++++++++++++++++++++++++++++++++.......+...+.+...+...........+++++++++++++++++++++++++++++++++++++++..+......+.+.....+......+....+.....+...+.......+...+...............+.....+...+..................+.+......+.........+...+..+.+..+............+.+...+..............+...+....+.....+.+...+..+.............+......+........+...+..................+.+...+..+.........+..........+..+.........+...+...+.......+..................+..+...+............+.+.....+.......+.....+...+......+.+.................+.......+........+......+.+.....+......+...........................+.......+......+...+.....+.+.........+......+........+..........+..+.........+....+...+.....+.........+....+.........+..+......+.......+...........+.+......+..+.+............+............+........+....+.........+..+.......+..+......+....+.....+....+.........+......+............+..+.+.....+..........+.........+..+.+..+.......+...+......+..............+...+...............+....+...+..................+..+.+......+.....+...............+.............+..+.........+......+....+..+............+...+........................+................+...+.....+....+..+...+......+.+...+........+.......++++++
-----
Notice
Private-Key and Public-Certificate-Request files created.
Your files are:
- req: C:/Program Files/OpenVPN/easy-rsa/pki/reqs/client4.req
- key: C:/Program Files/OpenVPN/easy-rsa/pki/private/client4.key
You are about to sign the following certificate:
Requested CN: 'client4'
Requested type: 'client'
Valid for: '7300' days
subject=
commonName = client4
Type the word 'yes' to continue, or any other input to abort.
Confirm requested details: yes
Using configuration from C:/Program Files/OpenVPN/easy-rsa/pki/8612f5aa/temp.02
Enter pass phrase for C:/Program Files/OpenVPN/easy-rsa/pki/private/ca.key:
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName :ASN.1 12:'client4'
Certificate is to be certified until Oct 10 11:16:28 2046 GMT (7300 days)
Write out database with 1 new entries
Database updated
WARNING
INCOMPLETE Inline file created:
- C:/Program Files/OpenVPN/easy-rsa/pki/inline/private/client4.inline
Missing TLS Key, see 'easyrsa help gen-tls'
Notice
Certificate created at:
- C:/Program Files/OpenVPN/easy-rsa/pki/issued/client4.crt
user@server C:/Program Files/OpenVPN/easy-rsa
EasyRSA-Shell: #`
