Bug#558319: Error in executing openvpn if certificate without absolute path

hinault Fri, 27 Nov 2009 12:34:46 -0800

Package: openvpn
Version: 2.1~rc20-2

Severity: normal  

Hello,

I haven't change my confs OpenVPN for many month and recently - one week approximately - openvpn can't to open connection with my server. In my conf the certificates aren't absolute path, just that :                                   "                                                                                                                    ca ca.crt                                                                                                            cert client.crt                                                                                                      key client.key                                                                                                       "                                                                                                                    and these file are in /etc/openvpn                                                                                  

But now openvpn not found the certificates if i don't precise the path :

"
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt

key /etc/openvpn/client.key "                          

Execute openvpn with parameter /etc/openvpn/my.conf give this message :

# openvpn /etc/openvpn/server.conf

Fri Nov 27 20:59:09 2009 OpenVPN 2.1_rc20 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] built on Oct  6 2009                                                                                                          Fri Nov 27 20:59:09 2009 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.                                                                                      Fri Nov 27 20:59:09 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables                                                                                                           Fri Nov 27 20:59:09 2009 Cannot load certificate file client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib                                                                                                         Fri Nov 27 20:59:09 2009 Exiting                                                                                    

The same bug is present on three pc on debian : two sid/squeeze and one Lenny.

Best regards.

Kévin

-- System Information:
Debian Release: squeeze/sid
&nbsp; APT prefers testing
&nbsp; APT policy: (988, 'testing'), (986, 'testing'), (984, 'stable'), (982, 
'stable'), (98, 'unstable'), (96, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openvpn depends on:
ii&nbsp; debconf [debconf-2.0]&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
1.5.28&nbsp;&nbsp;&nbsp;&nbsp; Debian configuration management sy
ii&nbsp; 
libc6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 2.10.1-7&nbsp;&nbsp; GNU C Library: Shared libraries
ii&nbsp; 
liblzo2-2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 2.03-2&nbsp;&nbsp;&nbsp;&nbsp; data compression library
ii&nbsp; 
libpam0g&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 1.1.0-4&nbsp;&nbsp;&nbsp; Pluggable Authentication Modules l
ii&nbsp; 
libpkcs11-helper1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
1.07-1&nbsp;&nbsp;&nbsp;&nbsp; library that simplifies the intera
ii&nbsp; 
libssl0.9.8&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 0.9.8k-6&nbsp;&nbsp; SSL shared libraries
ii&nbsp; openssl-blacklist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.5-2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; list of blacklisted OpenSSL RSA ke
ii&nbsp; openvpn-blacklist&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
0.4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; list of blacklisted OpenVPN RSA sh

Versions of packages openvpn recommends:
ii&nbsp; 
net-tools&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 1.60-23&nbsp;&nbsp;&nbsp; The NET-3 networking toolkit

Versions of packages openvpn suggests:
ii&nbsp; 
openssl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 0.9.8k-6&nbsp;&nbsp; Secure Socket Layer (SSL) binary a
pn&nbsp; 
resolvconf&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 &lt;none&gt;&nbsp;&nbsp;&nbsp;&nbsp; (no description available)

-- debconf information:
&nbsp; openvpn/vulnerable_prng:
&nbsp; openvpn/create_tun: false

signature.asc
Description: OpenPGP digital signature

Bug#558319: Error in executing openvpn if certificate without absolute path

Reply via email to