./build-ca is not working

Support forum for Easy-RSA certificate management suite.
Post Reply
maskedkuma
OpenVpn Newbie
Posts: 3
Joined: Tue Aug 01, 2017 10:46 am

./build-ca is not working

Post by maskedkuma » Mon Aug 21, 2017 9:43 am

I am trying to setup openvpn on a new debian 9 stretch install. i have done this before on debian 8 without a problem, but i can't figure this out:

i am using defaults in `vars`

Code: Select all

# cd /etc/openvpn/easy-rsa && source ./vars

Code: Select all

# ./clean-all

Code: Select all

# ./build-ca
req: Error on line 198 of config file "/etc/openvpn/easy-rsa/openssl.cnf"
Generating a 2048 bit RSA private key
................+++
.............................................................................+++
writing new private key to 'ca.key'
-----
unable to find 'distinguished_name' in config
problems making Certificate Request
140484666176768:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:../crypto/conf/conf_lib.c:272:

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 2818
Joined: Fri Jun 03, 2016 1:17 pm

Re: ./build-ca is not working

Post by TinCanTech » Mon Aug 21, 2017 11:17 am

maskedkuma wrote:req: Error on line 198 of config file "/etc/openvpn/easy-rsa/openssl.cnf"
There is no "openssl.cnf" .. so I don't know what you have done.

Look in /usr/share/easy-rsa

maskedkuma
OpenVpn Newbie
Posts: 3
Joined: Tue Aug 01, 2017 10:46 am

Re: ./build-ca is not working

Post by maskedkuma » Mon Aug 21, 2017 11:44 am

Code: Select all

openssl.cnf -> openssl-1.0.0.cnf
and copying openssl-1.0.0.cnf to openssl.cnf has the same effect.

Code: Select all

openssl version
OpenSSL 1.1.0f  25 May 2017

Code: Select all

# ./whichopensslcnf
/openssl.cnf
**************************************************************
  No /openssl.cnf file could be found
  Further invocations will fail
**************************************************************

Post Reply