Trouble Building Easy-RSA 2.2 on Ubuntu 18.04

Support forum for Easy-RSA certificate management suite.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
number6
OpenVpn Newbie
Posts: 5
Joined: Tue Nov 05, 2019 4:42 pm

Trouble Building Easy-RSA 2.2 on Ubuntu 18.04

Post by number6 » Tue Nov 05, 2019 4:47 pm

I got past the problem of Easy-RSA not finding the openssl-1.0.0.cnf by editing /etc/openvpn/easy-rsa/vars, but when I ran .build-ca, I got the following:

Can't load /root/.rnd into RNG
140421625237952:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/root/.rnd
Generating a RSA private key
...........................+++++
.............................................................................+++

I have read many articles on this, but it appears I don't even have the file .rnd anywhere on the system. Any help greatly appreciated, with my thanks in advance.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Trouble Building Easy-RSA 2.2 on Ubuntu 18.04

Post by TinCanTech » Tue Nov 05, 2019 6:11 pm

You can safely ignore the problem.

I would recommend you use Easyrsa3: https://github.com/TinCanTech/easy-rsa/releases

number6
OpenVpn Newbie
Posts: 5
Joined: Tue Nov 05, 2019 4:42 pm

Re: Trouble Building Easy-RSA 2.2 on Ubuntu 18.04

Post by number6 » Tue Nov 05, 2019 9:14 pm

I downloaded and untarred it, ran into the same problem:

$ ./easyrsa init-pki

init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: /home/tgvpadmin/easy-rsa-3.0.6/easyrsa3/pki

$ ./easyrsa build-ca

Using SSL: openssl OpenSSL 1.1.1 11 Sep 2018

Enter New CA Key Passphrase:
Re-Enter New CA Key Passphrase:
Generating RSA private key, 2048 bit long modulus (2 primes)
...........................................................................+++++
.........................................................................................................................................+++++
e is 65537 (0x010001)
Can't load /home/tgvpadmin/easy-rsa-3.0.6/easyrsa3/pki/.rnd into RNG
140693823164864:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/home/tgvpadmin/easy-rsa-3.0.6/easyrsa3/pki/.rnd
You are about to be asked to enter information that will be incorporated
into your certificate request.
...

I built the CA despite the error. Did I do something wrong? Is there something I should have done to prevent this from happening?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Trouble Building Easy-RSA 2.2 on Ubuntu 18.04

Post by TinCanTech » Tue Nov 05, 2019 10:11 pm

TinCanTech wrote:
Tue Nov 05, 2019 6:11 pm
You can safely ignore the problem.

Post Reply