Public bug reported:

* $EASY_RSA/whichopensslcnf fails to resolve to a valid openssl.cnf file
** I symlinked openssl-1.0.0.cnf to openssl.cnf as a work around (worked)

* The ./vars file is modified and contains duplicate information and
extra variables that probably should not be set.

Here's a simple patch:

--- vars        2011-07-01 03:31:26.000000000 -0500
+++ vars-new    2012-06-22 16:03:02.502439859 -0500
@@ -66,9 +66,4 @@
 export KEY_CITY="SanFrancisco"
 export KEY_ORG="Fort-Funston"
 export KEY_EMAIL="me@myhost.mydomain"
-export KEY_EMAIL=mail@host.domain
-export KEY_CN=changeme
-export KEY_NAME=changeme
-export KEY_OU=changeme
-export PKCS11_MODULE_PATH=changeme
-export PKCS11_PIN=1234

Notice KEY_EMAIL was being set twice, along with PKCS11_* and KEY_CN
should _NOT_ be set (this causes all keys generated with ./pkitool to
have the same CN)

** Affects: openvpn (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: openvpn

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/1016744

Title:
  OpenVPN example easy-rsa 2.0 issues

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1016744/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to