Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[RISOLTO] Problema con openvpn server: whichopensslcnf
View unanswered posts
View posts from last 24 hours
View posts from last 7 days

 
Reply to topic    Gentoo Forums Forum Index Forum italiano (Italian)
View previous topic :: View next topic  
Author Message
fbcyborg
Advocate
Advocate


Joined: 16 Oct 2005
Posts: 3056
Location: ROMA

PostPosted: Mon Jun 22, 2009 2:48 pm    Post subject: [RISOLTO] Problema con openvpn server: whichopensslcnf Reply with quote

Salve,

sto cercando di generare un nuovo certificato per openvpn, come faccio sempre, ma ho un problema.
I passi che sto facendo sono quelli indicati qui, sezione Windows Client Configuration, ovvero:
Code:
cd /usr/share/openvpn/easy-rsa/
source ./vars
./build-key <USERNAME>

Solo che quando faccio
Code:
source ./vars

ottengo il seguente messaggio:
Code:
-bash: /usr/share/openvpn/easy-rsa/whichopensslcnf: No such file or directory
NOTE: If you run ./clean-all, I will be doing a rm -rf on /usr/share/openvpn/easy-rsa/keys

Io non ho intenzinoe di fare un ./clean-all, sennò mi cancella tutte le chiavi presenti.
Eppure io non ho cancellato alcun file.

Avete qualche idea?

EDIT: fra l'altro questo credo che sia un problema che si è manifestato dopo un aggiornamento recente di openvpn.

Ho provato a cambiare un parametro in /usr/share/openvpn/easy-rsa/vars, ovvero da
Code:
export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA`
a
Code:
export KEY_CONFIG=`$EASY_RSA/openssl.cnf $EASY_RSA`


Solo che ora facendo
Code:
source ./vars
è peggio di prima!
Code:
/usr/share/openvpn/easy-rsa/openssl.cnf: line 10: HOME: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 11: RANDFILE: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 12: openssl_conf: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 17: oid_section: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 18: engines: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 37: default_ca: command not found
dir: cannot access =: No such file or directory
dir: cannot access \:\:KEY_DIR: No such file or directory
/usr/share/openvpn/easy-rsa/openssl.cnf: line 43: certs: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 44: crl_dir: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 45: database: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 46: new_certs_dir: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 48: certificate: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 49: serial: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 50: crl: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 51: private_key: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 52: RANDFILE: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 54: x509_extensions: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 60: default_days: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 61: 30: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 62: default_md: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 63: preserve: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 68: policy: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 72: countryName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 73: stateOrProvinceName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 74: organizationName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 75: organizationalUnitName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 76: commonName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 77: emailAddress: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 83: countryName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 84: stateOrProvinceName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 85: localityName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 86: organizationName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 87: organizationalUnitName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 88: commonName: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 89: emailAddress: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 93: default_bits: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 94: default_keyfile: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 95: distinguished_name: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 96: attributes: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 97: x509_extensions: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 111: string_mask: command not found
/usr/share/openvpn/easy-rsa/openssl.cnf: line 116: syntax error near unexpected token `('
/usr/share/openvpn/easy-rsa/openssl.cnf: line 116: `countryName                 = Country Name (2 letter code)'
NOTE: If you run ./clean-all, I will be doing a rm -rf on /usr/share/openvpn/easy-rsa/keys

Ma che diavolo hanno combinato al file di configurazione?
_________________
[HOWTO] Come criptare la /home usando cryptsetup e luks
[HOWTO] Abilitare il supporto al dom0 XEN su kernel 3.X
Help answer the unanswered


Last edited by fbcyborg on Mon Jun 22, 2009 6:27 pm; edited 1 time in total
Back to top
View user's profile Send private message
oRDeX
Veteran
Veteran


Joined: 19 Oct 2003
Posts: 1325
Location: Italy

PostPosted: Mon Jun 22, 2009 3:24 pm    Post subject: Reply with quote

Effettivamente `` indica che il file va eseguito, ma non è il caso in questione...prova a mettere "blabla" al posto di `blabla` lì dove specifichi openssl.cnf
Back to top
View user's profile Send private message
fbcyborg
Advocate
Advocate


Joined: 16 Oct 2005
Posts: 3056
Location: ROMA

PostPosted: Mon Jun 22, 2009 3:26 pm    Post subject: Reply with quote

Grande! Mi sa che ha funzionato ora

Code:
# source ./vars
NOTE: If you run ./clean-all, I will be doing a rm -rf on /usr/share/openvpn/easy-rsa/keys

Ora sembrerebbe OK!
_________________
[HOWTO] Come criptare la /home usando cryptsetup e luks
[HOWTO] Abilitare il supporto al dom0 XEN su kernel 3.X
Help answer the unanswered
Back to top
View user's profile Send private message
fbcyborg
Advocate
Advocate


Joined: 16 Oct 2005
Posts: 3056
Location: ROMA

PostPosted: Mon Jun 22, 2009 3:31 pm    Post subject: Reply with quote

Che pizza.. ancora problemi..

Code:
# ./build-key nomeutente
grep: /usr/share/openvpn/easy-rsa/openssl.cnf /usr/share/openvpn/easy-rsa: No such file or directory
pkitool: KEY_CONFIG (set by the ./vars script) is pointing to the wrong
version of openssl.cnf: /usr/share/openvpn/easy-rsa/openssl.cnf /usr/share/openvpn/easy-rsa
The correct version should have a comment that says: easy-rsa version 2.x

_________________
[HOWTO] Come criptare la /home usando cryptsetup e luks
[HOWTO] Abilitare il supporto al dom0 XEN su kernel 3.X
Help answer the unanswered
Back to top
View user's profile Send private message
oRDeX
Veteran
Veteran


Joined: 19 Oct 2003
Posts: 1325
Location: Italy

PostPosted: Mon Jun 22, 2009 5:53 pm    Post subject: Reply with quote

A giudicare dai commenti
Quote:
# This variable should point to
# the openssl.cnf file included
# with easy-rsa.
export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA`

Trasforma la suddetta riga in
Quote:
export KEY_CONFIG="$EASY_RSA/openssl.cnf"
Back to top
View user's profile Send private message
fbcyborg
Advocate
Advocate


Joined: 16 Oct 2005
Posts: 3056
Location: ROMA

PostPosted: Mon Jun 22, 2009 6:25 pm    Post subject: Reply with quote

Perfetto! Ha funzionato!

Grazie.. c'era un $EASY_RSA di troppo!
_________________
[HOWTO] Come criptare la /home usando cryptsetup e luks
[HOWTO] Abilitare il supporto al dom0 XEN su kernel 3.X
Help answer the unanswered
Back to top
View user's profile Send private message
oRDeX
Veteran
Veteran


Joined: 19 Oct 2003
Posts: 1325
Location: Italy

PostPosted: Mon Jun 22, 2009 6:29 pm    Post subject: Reply with quote

IMHO è un mezzo BUG unito ad un esempio davvero poco comprensibile.
Oppure...non abbiamo capito nulla nè io nè te :lol: :lol: :lol:
Back to top
View user's profile Send private message
fbcyborg
Advocate
Advocate


Joined: 16 Oct 2005
Posts: 3056
Location: ROMA

PostPosted: Mon Jun 22, 2009 6:32 pm    Post subject: Reply with quote

Secondo me invece hanno fatto un casino con la nuova versione.
Un dispatch-conf ha incasinato tutto! il ` al posto di " .. una variabile, dove non dovrebbe essere.. boh!
_________________
[HOWTO] Come criptare la /home usando cryptsetup e luks
[HOWTO] Abilitare il supporto al dom0 XEN su kernel 3.X
Help answer the unanswered
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Forum italiano (Italian) All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum