Bug#905010: easy-rsa on stretch fails on creating CA
Package: easy-rsa
Version: 2.2.2-2
Severity: normal
Dear Maintainer,
when using easy-rsa to create a CA (build-ca) the command fails with:
req: Error on line 198 of config file "/etc/openvpn/easy-rsa/openssl.cnf"
Generating a 2048 bit RSA private key
................+++
.............................................................................+++
writing new private key to 'ca.key'
-----
unable to find 'distinguished_name' in config
problems making Certificate Request
140484666176768:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:../crypto/conf/conf_lib.c:272:
This is after soft linking the supplied openssl-1.0.0.cnf as openssl.cnf. The shown line number references KEY_ALTNAMES which does not seem to be available in the supplied "vars" script. If you add the following to the vars file the build-ca script runs again:
export KEY_ALTNAMES="EasyRSA"
I would suggest to add the export as well as a softlink of openssl.cnf to openssl-1.0.0.cnf to make things easier for the users (this is the point of easy-rsa as I see it). This is broken in stable, so to me it would make sense to fix it there as well.
-- System Information:
Distributor ID: Raspbian
Description: Raspbian GNU/Linux 9.4 (stretch)
Release: 9.4
Codename: stretch
Architecture: armv6l
Kernel: Linux 4.9.59+
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968), LANGUAGE=en_GB.UTF-8 (charmap=locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages easy-rsa depends on:
ii openssl 1.1.0f-3+deb9u2
Versions of packages easy-rsa recommends:
ii opensc 0.16.0-3
easy-rsa suggests no packages.
-- debconf information:
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = "en_US.UTF-8",
LANG = "en_GB.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_GB.UTF-8").
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
Reply to: