broken easy rsa

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
eels69
OpenVpn Newbie
Posts: 1
Joined: Tue Jul 19, 2011 9:03 pm

broken easy rsa

Post by eels69 » Tue Jul 19, 2011 9:10 pm

i downloadet openvpn 2.2.1 and easy rsa drove me nearly mad everytime i generated client certs it said "failed to update database TXT_DB error number 2"
after some googling i found that with setting unique_subject = yes to no in index.txt.attr the error was gone. Then i thougt hm maybe some info is globaly shared so i get some kind of duplicate client certs so i used pkitools with --interact option and voila i saw it. Common name in batch mode is not changed.
It uses the common name from vars file. Is this now a error on my side or is pkitools broken?

User avatar
Bebop
Forum Team
Posts: 301
Joined: Wed Dec 15, 2010 9:24 pm

Re: broken easy rsa

Post by Bebop » Wed Jul 20, 2011 10:42 pm

What was your process for generating the client certs?

If your easy-rsa batch files are new and unmodified, you should be able to do all of these steps with no errors:

Code: Select all

Start->run->cmd
cd C:\Program Files (x86)\OpenVPN\easy-rsa
vars
clean-all
build-ca
build-key-server server
build-key client1
build-key client2
build-key client3

[EDIT] Cancel what I just said. I updated my OpenVPN and now having major issues with easy-rsa. It seems very broken right now.

The conversation is continued here: post13785.html
The cure for boredom is curiosity

Post Reply