Page 1 of 1
[Solved] EasyRSA 3 build-ca error
Posted: Mon Mar 14, 2016 9:30 pm
by xlepws
Hello, I'm trying to create a VPN server on a Win10 machine..I can successfully enter the EasyRSA 3 Shell, do the init-pki, then I get an error during the build-ca phase:
Code: Select all
EasyRSA Shell
# ./easyrsa init-pki
Note: using Easy-RSA configuration from: ./vars
init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: c:/Program Files/OpenVPN/EasyRSA-3.0.1/pki
EasyRSA Shell
# ./easyrsa build-ca
Note: using Easy-RSA configuration from: ./vars
./easyrsa[1215]: mktemp: not found
./easyrsa[1215]: mktemp: not found
Loading 'screen' into random state - done
Generating a 2048 bit RSA private key
..................+++
..................................................+++
writing new private key to ''
Invalid argument
3868:error:02001000:system library:fopen:system library:bss_file.c:398:fopen('','wb')
3868:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
Easy-RSA error:
Failed to build the CA
What can that be? I have absolutely no clue on how to proceed
Thank you!
Re: [EasyRSA 3] build-ca error
Posted: Mon Mar 14, 2016 9:45 pm
by Traffic
xlepws wrote:Your newly created PKI dir is: c:/Program Files/OpenVPN/EasyRSA-3.0.1/pki
Are you sure you have
write access to this directory ?
Re: [EasyRSA 3] build-ca error
Posted: Mon Mar 14, 2016 10:14 pm
by xlepws
Hi, I suppose "I" have write access to the folder. I mean, I launched
Code: Select all
c:\Program Files\OpenVPN\EasyRSA-3.0.1>bin\sh.exe bin\easyrsa-shell-init.sh
through an Admin Command Prompt, and it (the easyrsa shell) was able to create the "pki" folder..why shouldn't it be able to write in it?
I also tried disabling inheritance to EasyRSA-3.0.1 folder and giving every user the "full-control" permissions and pushing them down to subfolders..but nothing changes, the error is still the same
Any suggestion?
Re: [EasyRSA 3] build-ca error
Posted: Mon Mar 14, 2016 11:21 pm
by Traffic
Re: [EasyRSA 3] build-ca error
Posted: Mon Mar 14, 2016 11:24 pm
by xlepws
bang on
What I had done was to copy the "missing" \bin files from 3.0.0-rc2 to 3.0.1, then proceed. But somehow
this wasn't the way to go.
Just using the full 3.0.0-rc2 folder did the trick!
Thank you!
Re: [EasyRSA 3] build-ca error
Posted: Mon Mar 14, 2016 11:41 pm
by Traffic
Thanks for letting us know the solution