OpenVPN Support Forum

Hi,

I am trying to upgrade or improve my certificates on my OpenVPN server. My clients get the MD5 not supported after april 2018 warning when connecting. (i used the standard install how-to a while ago)

I see that I need to use a 3.x version of Easy-RSA to create the new key en cert files for the server and clients (I think). But I can't seem to get the startup script to start Easy-RSA the right way, my error: (when starting "Easy-RSA-start.bat")

FATAL: EasyRSA Shell init is missing a required external file:
which.exe
Your installation is incomplete and cannot function without the required
files.

Press enter to exit.

Searched google, github easy-rsa issues, this forum and tried every version of Easy-RSA, all the same outcome.

Can somebody help?
How can I create better certificates (sha256 I have read)? (is this perhaps possible with easy-rsa 2.x that works fine?)

My setup:
- Windows server 2003r2
- Easy-RSA 3.0.4
- OpenVPN server 2.3.13
- Clients mostly IOS devices and still working fine (except for de MD5 warning)

Thanks for helping.

You must have unzipped the file incorrectly because which.exe is present in v304 ..

no, i think i did it correctly, the file which.exe and more (16 files) is present in the "bin" folder.
Looks like the script doesn't find it.
And i also have this issue with other/older versions.

Just unzip EasyRSA304 to your home directory (not program files) and go from there.

Hi, I have tried it in every directory on my 2003R2 server, it doesn't work.
On my windows 7 laptop the script starts without issues. Can I create the files/cert on my laptop and then copy them?

bjh wrote: ↑

Fri Apr 27, 2018 7:37 am

I have tried it in every directory on my 2003R2 server, it doesn't work

You know, you can copy/paste from a command window .....

bjh wrote: ↑

Fri Apr 27, 2018 7:37 am

Can I create the files/cert on my laptop and then copy them?

Yes.