OpenSSL Issue - Win7 x64 [EDITED]

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
roadlesstraveled
OpenVpn Newbie
Posts: 4
Joined: Wed Jun 22, 2011 1:09 am

OpenSSL Issue - Win7 x64 [EDITED]

Post by roadlesstraveled » Wed Jun 22, 2011 1:12 am

EDITED:
1) I download OpenVPN 2.2 as administrator
2) I restart
3) I ran cmd.exe and enter cd C:\Program Files\OpenVPN\easy-rsa (even though I'm running 64bit I change the location to this folder)
4) I ran init-config

Code: Select all

copy vars.bat.sample vars.bat
1 file(s) copied.
copy openssl.cnf.sample spenssl.cnf
The system cannot find the file specified
5) I ran vars
6) I ran clean-all

Code: Select all

The system cannot find the path specified.
The system cannot find the path specified.
1 file(s) copied.
1 file(s) copied.
7) I ran build-ca

Code: Select all

The system cannot find the path specified.
WARNING:  can't open config file:  c:\openssl/ssl/openssl.cnf
error on line 150 of openssl.cnf
3832:error:0E065068:configuration file routines:STR_COPY:variable has no value:.
\crypto\conf\conf_def.c:618:line 150
I see that there's a new patch HERE but it is in the format .patch and I have no idea what to do with it.

Any help would be greatly appreciated.
Last edited by roadlesstraveled on Wed Jun 22, 2011 4:08 pm, edited 2 times in total.

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenSSL Issue - Win7 x64

Post by janjust » Wed Jun 22, 2011 7:39 am

the warning
warning: can't open config file: c:\openssl/ssl/openssl.cnf .... ... ..
is an artifact of the openssl binaries that come with openvpn 2.2 ; you can ignore this warning

the warning
error on line 150 of openssl.cnf
2648:error:0e065068:configuration file routines:str_copy:variable has no value:.\crypto\conf\conf_def.c:610:line 150
suggests that you probably forgot to load the 'vars.bat' file first - see the HOWTO http://openvpn.net/index.php/open-sourc ... o.html#pki for details.

roadlesstraveled
OpenVpn Newbie
Posts: 4
Joined: Wed Jun 22, 2011 1:09 am

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by roadlesstraveled » Wed Jun 22, 2011 4:07 pm

I've edited my original post for clarity.

Before coming here to post I went through several attempts of trying to get this installed.
I ran vars.bat each time.

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by janjust » Thu Jun 23, 2011 1:50 pm

there are some issues with the openssl binaries shipped with openvpn 2.2 ; try adding the following lines to the vars.bat file

Code: Select all

set KEY_OU=""
set KEY_CN=""
set KEY_NAME=""
set PKCS11_MODULE_PATH=dummy
set PKCS11_PIN=dummy
rerun 'vars' and then try again.

roadlesstraveled
OpenVpn Newbie
Posts: 4
Joined: Wed Jun 22, 2011 1:09 am

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by roadlesstraveled » Thu Jun 23, 2011 3:37 pm

I am still getting the same error with the numbers 2320 in front.

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by janjust » Fri Jun 24, 2011 7:36 am

please post the entire error message - it's the last part which is relevant, not the first ugly error codes.

roadlesstraveled
OpenVpn Newbie
Posts: 4
Joined: Wed Jun 22, 2011 1:09 am

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by roadlesstraveled » Fri Jun 24, 2011 5:04 pm

I just ran it again and this is what it displayed after build-ca.

Code: Select all

The system cannot find the path specified.
WARNING: can't open config file: C:\openssl/ssl/openssl.cnf
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.............................................++++++
unable to write 'random state'
writing new private key to 'keys\ca.key'
------
You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
------
Country Name <2 letter code> [US]:
Is that working properly?

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenSSL Issue - Win7 x64 [EDITED]

Post by janjust » Fri Jun 24, 2011 5:21 pm

yes it is - either update the vars.bat file reflect the CA settings you want (country=..., state=.... etc) or overrule them here.
When the process asks you for a challenge password, just hit enter.

Post Reply