Caros,
gostaria de ajuda pois estou com problemas no openvpn na geração da CA.
Dentro do shell SH fiz:
root@fw /usr/local/etc/openvpn/easy-rsa/2.0 # . ./vars
NOTE: If you run ./clean-all, I will be doing a rm -rf on
/usr/local/etc/openvpn/easy-rsa/2.0/keys
root@fw /usr/local/etc/openvpn/easy-rsa/2.0 # ./clean-all
root@fw /usr/local/etc/openvpn/easy-rsa/2.0 # ./build-ca
Please edit the vars script to reflect your configuration,
then source it with "source ./vars".
Next, to start with a fresh PKI configuration and to delete any
previous certificates and keys, run "./clean-all".
Finally, you can run this tool (pkitool) to build certificates/keys.
Sinceramente nao sei como retirar essa mensagem e dar prosseguimento na
configuração. Já fiz várias buscas e nao encontrei solução.
Gostaria que alguem desse uma força.
Seguem os arquivos.
cat /usr/local/etc/openvpn/easy-rsa/2.0/vars
export EASY_RSA="`pwd`"
export OPENSSL="openssl"
export PKCS11TOOL="pkcs11-tool"
export GREP="grep"
export KEY_DIR="$EASY_RSA/keys"
echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
export PKCS11_MODULE_PATH="dummy"
export PKCS11_PIN="dummy"
export KEY_SIZE=1024
export CA_EXPIRE=3650
export KEY_EXPIRE=3650
export KEY_COUNTRY=BR
export KEY_PROVINCE=DF
export KEY_CITY=Brasilia
export KEY_ORG="EMPRESA"
export KEY_EMAIL="em...@dominio.com.br"
cat /usr/local/etc/openvpn/easy-rsa/2.0/clean-all
if [ "$KEY_DIR" ]; then
rm -rf "$KEY_DIR"
mkdir "$KEY_DIR" && \
chmod go-rwx "$KEY_DIR" && \
touch "$KEY_DIR/index.txt" && \
echo 01 >"$KEY_DIR/serial"
else
echo 'Please source the vars script first (i.e. "source ./vars")'
echo 'Make sure you have edited it to reflect your configuration.'
fi
cat /usr/local/etc/openvpn/easy-rsa/2.0/build-ca
export EASY_RSA="${EASY_RSA:-.}"
"$EASY_RSA/pkitool" --interact --initca $*
-------------------------
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
