[pivpn] Cant create profiles after fresh install

Support forum for Easy-RSA certificate management suite.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
pbrinkhoff
OpenVpn Newbie
Posts: 1
Joined: Wed Aug 24, 2022 4:51 pm

[pivpn] Cant create profiles after fresh install

Post by pbrinkhoff » Wed Aug 24, 2022 4:55 pm

hi,

i reinstalled openvpn with curl -L http://install.pivpn.io | bash
i'm using raspberrypi os lite 32-bit on a 3b+
after using pivpn -a i recieve this error message:

Code: Select all

spawn ./easyrsa build-client-full test
* Notice:
Using Easy-RSA configuration from: /etc/openvpn/easy-rsa/pki/vars

* Notice:
Using SSL: openssl OpenSSL 1.1.1n  15 Mar 2022

Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/639f0255/temp.14de6a2f'
Enter PEM pass phrase:
1995558976:error:28078065:UI routines:UI_set_result_ex:result too small:../crypto/ui/ui_lib.c:905:You must type in 4 to 1024 characters
1995558976:error:2807106B:UI routines:UI_process:processing error:../crypto/ui/ui_lib.c:545:while reading strings
1995558976:error:0906406D:PEM routines:PEM_def_callback:problems getting password:../crypto/pem/pem_lib.c:59:
1995558976:error:0907E06F:PEM routines:do_pk8pkey:read key:../crypto/pem/pem_pk8.c:83:

Easy-RSA error:

Failed to generate request

Host: nix | Linux | /bin/bash

expect: spawn id exp4 not open
    while executing
"expect eof"
[2022-08-24T17:53:11+0100]: [ERROR]: Client Public Key Certificate not found: test.crt

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1332
Joined: Tue Feb 16, 2021 10:41 am

Re: Cant create profiles after fresh install

Post by openvpn_inc » Wed Aug 24, 2022 5:22 pm

Hi,

You had put this in the forum for "OpenVPN Connect (Windows)" but it seems to be an Easy-RSA question, so I moved it here.

I would very strongly recommend NOT running your Easy-RSA on a RPi. It's poor from a security standpoint in multiple ways. Maintain your Easy-RSA PKI on a regular computer. Even Windows is fine (although there I would probably use wsl.exe to provide a Linux environment.)

As an alternative, if you want an all-in-one VPN suite, consider Access Server:
https://openvpn.net/vpn-server-resource ... pberry-pi/
The free version is limited to only two connections, but then, a Pi can't really handle much more than that anyway.

Oh, sorry, I guess you did say 32-bit. We don't have AS for 32-bit. Maybe your script author provides support through the github project page?

regards, rob0
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

TinCanTech
OpenVPN Protagonist
Posts: 11138
Joined: Fri Jun 03, 2016 1:17 pm

Re: Cant create profiles after fresh install

Post by TinCanTech » Wed Aug 24, 2022 6:22 pm

@ rob0 pivpn is a good tool for beginners to get to grips with running a VPN.

@ pbrinkhoff - The issue you are having has been reported to Pivpn here:
https://github.com/pivpn/pivpn/issues/1600

I am hoping to see a fix quite soon.

4s3ti
OpenVpn Newbie
Posts: 1
Joined: Thu Aug 25, 2022 12:32 am

Re: Cant create profiles after fresh install

Post by 4s3ti » Thu Aug 25, 2022 12:53 am

The issue with PiVPN has been fixed and pushed to PiVPN Master branch.

Post Reply