OpenVPN Support Forum

I'm having difficulty figuring out how to have easyrsa create a signed certificate
I've run the following commands
easyrsa.real init-pki
easyrsa.real build-ca nopass
easyrsa.real build-server-full openvpn-server nopass
But this is the error when I try to run it.
_____________________________________________________
Using SSL: openssl OpenSSL 1.0.2r-freebsd 26 Feb 2019

Easy-RSA error:

Unknown cert type 'server'
______________________________________________________
openvpn 2.4.7
freebsd 11.2 Stable
The x509-types directory in to be located in the same directory as the 'easyrsa' script.
Any ideas of what I could be doing wrong?

What is easyrsa.real ?

easyrsa under FreeBSD?
https://kifarunix.com/install-and-confi ... reebsd-12/

Pippin wrote: ↑

Sat Mar 30, 2019 5:03 pm

easyrsa under FreeBSD?
https://kifarunix.com/install-and-confi ... reebsd-12/

muchas gracias

I think people should not use Free--bla, if they don't understand how it works

Or people could, at least, try to read the excellent docs these projects offer.

What version of EasyRSA is installed? You can get this will `pkg info`, something like:

root@:/usr/local/etc/openvpn/easy-rsa # pkg info easy-rsa | grep Version
Version : 3.0.5_1
It's worked after adding an absolute path in var file:
set_var EASYRSA_EXT_DIR "/usr/local/etc/openvpn/easy-rsa/x509-types"
set_var EASYRSA_SSL_CONF "/usr/local/etc/openvpn/easy-rsa/openssl-easyrsa.cnf"

original:
set_var EASYRSA_EXT_DIR "$EASYRSA/x509-types"
set_var EASYRSA_SSL_CONF "$EASYRSA/openssl-easyrsa.cnf"