Page 1 of 1

[pivpn] Cant create profiles after fresh install

Posted: Wed Aug 24, 2022 4:55 pm
by pbrinkhoff
hi,

i reinstalled openvpn with curl -L http://install.pivpn.io | bash
i'm using raspberrypi os lite 32-bit on a 3b+
after using pivpn -a i recieve this error message:

Code: Select all

spawn ./easyrsa build-client-full test
* Notice:
Using Easy-RSA configuration from: /etc/openvpn/easy-rsa/pki/vars

* Notice:
Using SSL: openssl OpenSSL 1.1.1n  15 Mar 2022

Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/639f0255/temp.14de6a2f'
Enter PEM pass phrase:
1995558976:error:28078065:UI routines:UI_set_result_ex:result too small:../crypto/ui/ui_lib.c:905:You must type in 4 to 1024 characters
1995558976:error:2807106B:UI routines:UI_process:processing error:../crypto/ui/ui_lib.c:545:while reading strings
1995558976:error:0906406D:PEM routines:PEM_def_callback:problems getting password:../crypto/pem/pem_lib.c:59:
1995558976:error:0907E06F:PEM routines:do_pk8pkey:read key:../crypto/pem/pem_pk8.c:83:

Easy-RSA error:

Failed to generate request

Host: nix | Linux | /bin/bash

expect: spawn id exp4 not open
    while executing
"expect eof"
[2022-08-24T17:53:11+0100]: [ERROR]: Client Public Key Certificate not found: test.crt

Re: Cant create profiles after fresh install

Posted: Wed Aug 24, 2022 5:22 pm
by openvpn_inc
Hi,

You had put this in the forum for "OpenVPN Connect (Windows)" but it seems to be an Easy-RSA question, so I moved it here.

I would very strongly recommend NOT running your Easy-RSA on a RPi. It's poor from a security standpoint in multiple ways. Maintain your Easy-RSA PKI on a regular computer. Even Windows is fine (although there I would probably use wsl.exe to provide a Linux environment.)

As an alternative, if you want an all-in-one VPN suite, consider Access Server:
https://openvpn.net/vpn-server-resource ... pberry-pi/
The free version is limited to only two connections, but then, a Pi can't really handle much more than that anyway.

Oh, sorry, I guess you did say 32-bit. We don't have AS for 32-bit. Maybe your script author provides support through the github project page?

regards, rob0

Re: Cant create profiles after fresh install

Posted: Wed Aug 24, 2022 6:22 pm
by TinCanTech
@ rob0 pivpn is a good tool for beginners to get to grips with running a VPN.

@ pbrinkhoff - The issue you are having has been reported to Pivpn here:
https://github.com/pivpn/pivpn/issues/1600

I am hoping to see a fix quite soon.

Re: Cant create profiles after fresh install

Posted: Thu Aug 25, 2022 12:53 am
by 4s3ti
The issue with PiVPN has been fixed and pushed to PiVPN Master branch.