Hi again,

>> The stderr is recoreded to "test name"-stderr by autopkgtest.
>> But that file is empty...
> 
> Yes, that only lists non-redirected stderr. Since output on stderr
> causes the autopkgtest to fail by default the output of most commands is
> already redirected to /dev/null

Sorry, I misunderstood what you wrote yesterday.
I added "allow-stderr" to debian/tests/control.
Then server-setup-with-ca-stderr looked like

Generating RSA private key, 2048 bit long modulus (2 primes)
............+++++
..............................................+++++
e is 65537 (0x010001)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Common Name (eg: your user, host, or server name) [Easy-RSA CA]:problems making 
Certificate Request

Easy-RSA error:

Failed to build the CA

The above seems suggesting "easyrsa" waits some input from stdin.
So I changed the test script as follows:

--- server-setup-with-ca-orig   2021-03-08 17:12:26.215151712 +0900
+++ server-setup-with-ca        2021-03-08 17:14:37.367548813 +0900
@@ -39,9 +39,9 @@
 
 info "Setup the CA and the server keys"
 ./easyrsa init-pki
-./easyrsa build-ca nopass 
-./easyrsa build-server-full server nopass 
-./easyrsa gen-dh 
+echo . | ./easyrsa build-ca nopass 
+echo . | ./easyrsa build-server-full server nopass 
+echo . | ./easyrsa gen-dh 
 
 info "Create the OpenVPN server config file"
 cat << EOF > /etc/openvpn/server.conf

Then the output to stderr "improved" as follows:

Generating RSA private key, 2048 bit long modulus (2 primes)
...................................................+++++
..................................+++++
e is 65537 (0x010001)
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Common Name (eg: your user, host, or server name) [Easy-RSA CA]:error, no 
objects specified in config file
problems making Certificate Request

Easy-RSA error:

Failed to build the CA


Best regards, Ryutaroh

Reply via email to