Re: pkg/48621 (openvpn and openssl not getting along?)

["OBATA Akio" <obata%lins.jp@localhost>]

The following reply was made to PR pkg/48621; it has been noted by GNATS.

From: "OBATA Akio" <obata%lins.jp@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/48621 (openvpn and openssl not getting along?)
Date: Tue, 04 Mar 2014 16:19:36 +0900

 > 1. OpenVPN didn't come with an easy-rsa section. I've been trying to use the 
 > easy-rsa scripts directly off of the OpenVPN website.
 
 Please read README (/usr/pkg/share/doc/openvpn/README) first,
 
    Note that easy-rsa and tap-windows are now maintained in their own 
subprojects.
    Their source code is available here:
 
      https://github.com/OpenVPN/easy-rsa
      https://github.com/OpenVPN/tap-windows
 
 > 2. I can't seem to get a good working example going from 
 > /usr/pkg/share/examples/openssl/openssl.cnf, so i'm getting various errors 
 > trying to sign my certs with a CA.
 
 I guess that you are using officially provided binary packages for 
NetBSD-6.1.2.
 It is not built with openssl from pkgsrc.
 Remove it first (pkg_delete openssl), and try to configure with builtin 
openssl.
 Example config file should be /usr/share/examples/openssl/openssl.cnf,
 and you can refer man page openssl.cnf(5),
    % man openssl.cnf
 
 Furthermore, easy-rsa contains such file as openssl-1.0.0.cnf.
 
 If above information does not help you, could you ask to
 openvpn/easy-rsa community instead?
 Because no NetBSD/pkgsrc specific matters remain.
 
 -- 
 OBATA Akio / obata%lins.jp@localhost