Your message dated Fri, 8 Feb 2019 16:52:37 +0100
with message-id <[email protected]>
and subject line 
has caused the Debian Bug report #905010,
regarding easy-rsa on stretch fails on creating CA
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
905010: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905010
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: easy-rsa
Version: 2.2.2-2
Severity: normal

Dear Maintainer,

when using easy-rsa to create a CA (build-ca) the command fails with:

req: Error on line 198 of config file "/etc/openvpn/easy-rsa/openssl.cnf"
Generating a 2048 bit RSA private key
................+++
.............................................................................+++
writing new private key to 'ca.key'
-----
unable to find 'distinguished_name' in config
problems making Certificate Request
140484666176768:error:0E06D06A:configuration file routines:NCONF_get_string:no 
conf or environment variable:../crypto/conf/conf_lib.c:272:

This is after soft linking the supplied openssl-1.0.0.cnf as openssl.cnf. The 
shown line number references KEY_ALTNAMES which does not seem to be available 
in the supplied "vars" script. If you add the following to the vars file the 
build-ca script runs again:

export KEY_ALTNAMES="EasyRSA"


I would suggest to add the export as well as a softlink of openssl.cnf to 
openssl-1.0.0.cnf to make things easier for the users (this is the point of 
easy-rsa as I see it). This is broken in stable, so to me it would make sense 
to fix it there as well.


-- System Information:
Distributor ID: Raspbian
Description:    Raspbian GNU/Linux 9.4 (stretch)
Release:        9.4
Codename:       stretch
Architecture: armv6l

Kernel: Linux 4.9.59+
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=locale: Cannot set 
LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968), LANGUAGE=en_GB.UTF-8 (charmap=locale: Cannot set LC_CTYPE to 
default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages easy-rsa depends on:
ii  openssl  1.1.0f-3+deb9u2

Versions of packages easy-rsa recommends:
ii  opensc  0.16.0-3

easy-rsa suggests no packages.

-- debconf information:
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
        LANGUAGE = (unset),
        LC_ALL = (unset),
        LC_CTYPE = "en_US.UTF-8",
        LANG = "en_GB.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_GB.UTF-8").
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory

--- End Message ---
--- Begin Message ---

--
μ.

--- End Message ---

Reply via email to