Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Jan 2005 21:11:10 -0500
From:      Shawn <sgill@metrocast.net>
To:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   openvpn?
Message-ID:  <41F064BE.8060509@metrocast.net>

next in thread | raw e-mail | index | archive | help
I have been attempting to get open vpn working on my freebsd 4.11 Alpha 
machine. SO Far I have done the following..

I did the make install  for /usr/ports/security/openvpn/

Where is uses SSL Im trying to understand the config file for 
/etc/ssl/openssl.cnf After an attempted figure  change I try to generate 
the keys..

I  create a master certificate authority certificate/private-key

*openssl req -nodes -new -x509 -keyout shawng-ca.key -out shawng-ca.crt 
-days 3650*

Then create certificate/private-key pairs for both Home and Office:

*openssl req -nodes -new -keyout office.key -out office.csr

*

Then this gives me a hard time..

*openssl ca -out office.crt -in office.csr

*

# openssl ca -out office.crt -in office.csr
--> /This screams config file to me --> /Using configuration from 
/etc/ssl/openssl.cnf
Error opening CA private key ./demoCA/private/cakey.pem
63975:error:0E06D06C:configuration file routines:NCONF_get_string:no 
value:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/conf/conf_lib.c:329:group=CA_default 
name=unique_subject
63975:error:02001002:system library:fopen:No such file or 
directory:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:276:fopen('./demoCA/private/cakey.pem','r') 

63975:error:20074002:BIO routines:FILE_CTRL:system 
lib:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/bio/bss_file.c:278: 

unable to load CA private key
Segmentation fault (core dumped)

Im just having troubles understanding whats what in the config file ..






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41F064BE.8060509>