I can't able to create a New certificate

pdurgaramesh

Dear All,

I am using CentOS Linux 4.8 and running OpenVPN 2.0.9. Now i have the problem in last few days that i can't able to create a New certificate and it gives error. The existing certificates(Clients) can able to connect and it works fine but they are able to view under certificates in OpenVPN status window. The error is given below. Please help me to sort out this issue.

ERROR:

+ OK got the valid input
+ OK got the User Private Key
+ OK generated the User Certificate Request
+ OK read current openssl serial (01)
+ OK read the openssl database (1 items)
+ OK read the CA Private Key
+ OK signed the User Certificate Request with CA Private Key
- ERROR on 267 line (openssl_pkey_export_to_file)
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0E06D06C:configuration file routines:NCONF_get_string:no value
error:0200100D:system library:fopen:Permission denied
error:2006D002:BIO routines:BIO_new_file:system lib
error:09072007:PEM routines:PEM_write_bio:BUF lib
(That might mean that the key folder is not write enabled for www user)

Thanks in Advance
Durga Ramesh.P

Bebop

pdurgaramesh wrote error:0200100D:system library:fopen:Permission denied
error:2006D002:BIO routines:BIO_new_file:system lib
error:09072007:PEM routines:PEM_write_bio:BUF lib
(That might mean that the key folder is not write enabled for www user)

Have you tired to locate the key folder to see that it is write enabled for the www user?

janjust

sounds like you forgot to run the

. ./var

command before trying to generate a new easy-rsa certificate...