Hello :) I accidentally used [b]build-key-pass[/b] with the same client name as I had already created key and cert files for using [b]build-key[/b]. Presumably because the client already existed, [b]build-key-pass[/b] failed with "TXT_DB error number 2". Now the $KEY_DIR/.crt file is empty. Trying to clean up with [b]revoke-full[/b] generates "error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: TRUSTED CERTIFICATE" presumably because of the empty .crt file. How to clean up? The earlier client files should be available from backup. EDIT: OpenVPN 2.1.3 running on Debian 6 Squeeze Best Charles

Thanks Mimiko :) That was quick! I deleted all the $KEY_DIR/.* files and the client's line from $KEY_DIR/index.txt after which [b]build-key-pass[/b] was able to create files for the client name. :) I couldn't see any use for $KEY_DIR/serial in this fix ... ? Best Charles

Used build-key-pass for existing client; how to clean up?

catkin

Hello 🙂

I accidentally used build-key-pass with the same client name as I had already created key and cert files for using build-key. Presumably because the client already existed, build-key-pass failed with "TXT_DB error number 2". Now the $KEY_DIR/<client name>.crt file is empty. Trying to clean up with revoke-full generates "error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:650:Expecting: TRUSTED CERTIFICATE" presumably because of the empty .crt file.

How to clean up?

The earlier client files should be available from backup.

EDIT: OpenVPN 2.1.3 running on Debian 6 Squeeze

Best

Charles

Mimiko

See
$KEY_DIR/index.txt
$KEY_DIR/serial
for glues. You'll figurea out what lines to delete.

catkin

Thanks Mimiko 🙂

That was quick!

I deleted all the $KEY_DIR/<client name>.* files and the client's line from $KEY_DIR/index.txt after which build-key-pass was able to create files for the client name. 🙂

I couldn't see any use for $KEY_DIR/serial in this fix ... ?

Best

Charles

Mimiko

The $KEY_DIR/serial file stores next index to use.

catkin

Mimiko wroteThe $KEY_DIR/serial file stores next index to use.

Thanks 🙂

If I hadn't created another client in the meantime, I could have set it back. Will there be any consequences from leaving it as-is?

Mimiko

This file is modified every time you create another client. So you may not worried about it content.

catkin

Thanks Mimiko 🙂 Problem solved; all good.