Can't Generate CA

All comments and questions related to the functionality of the OpenVPN web pages and forum should go here.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
idiogenes
OpenVpn Newbie
Posts: 1
Joined: Tue Jul 17, 2012 3:15 am

Can't Generate CA

Post by idiogenes » Tue Jul 17, 2012 3:25 am

Running OpenBSD 5.0 with openvpn 2.1.4 & opensc 0.11 installed from packages:

# pkg_info
openct-0.6.20p0 drivers for several smart card readers
opensc-0.11.13p0 set of libraries and utilities to access smart cards
openvpn-2.1.4 easy-to-use, robust, and highly configurable VPN

I sourced my vars file and "env" show the variables.

# env | grep KEY
KEY_EMAIL=my.name@gmail.com
KEY_PROVINCE=CA
KEY_SIZE=1024
KEY_DIR=/etc/openvpn/easy-rsa/keys
KEY_EXPIRE=3650
KEY_COUNTRY=US
KEY_ORG=myorg
KEY_CONFIG= <---- I commented out this line because it threw a cannot find file error
KEY_CITY=SanFrancisco

The pkcs11-tool is also installed
# pkcs11-tool
Usage: pkcs11-tool [OPTIONS]
Options:
--show-info, -I Show global token information


However, whenever I run ./build-ca or ./pkitool --initca I get:

Using CA Common Name: myorg CA
Please edit the vars script to reflect your configuration,
then source it with "source ./vars".
Next, to start with a fresh PKI configuration and to delete any
previous certificates and keys, run "./clean-all".
Finally, you can run this tool (pkitool) to build certificates/keys.

The results of googling for this error all talk about making sure I sourced var - which I have. Any help would be appreciated.

Thank you!

Post Reply