Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Jakob Curdes
> To find out what went wrong, you need to have some understanding of > certificates and the openssl application and scripts. There are other > tools that will allow you to create and maintain a CA depending on > your requirements, one thing holds true however: The CA must not be on > your pro

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
hello, that's good advise. One more reason to start over and do a better job on OPenvpn and easy-rsa. Greetings, J. op 21-01-14 16:18, Erich Titl schreef: Hi Johan on 21.01.2014 15:20, Johan Vermeulen wrote: hello, no, I did not set this up. I cannot contact the person who did. Indeed, it

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Jan Just Keijser
Johan Vermeulen wrote: hello, no, I did not set this up. I cannot contact the person who did. Indeed, it would be better to start over from scratch. Still, I would like to understand what went wrong. It do see in the Openvpn docs the advise to copy easy-rsa away from /usr/local/openvpn so not

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Erich Titl
Hi Johan on 21.01.2014 15:20, Johan Vermeulen wrote: > hello, > > no, I did not set this up. I cannot contact the person who did. > > Indeed, it would be better to start over from scratch. > Still, I would like to understand what went wrong. > > It do see in the Openvpn docs the advise to copy

Re: [Openvpn-users] openvpn with ldap

2014-01-21 Thread Umar Draz
Hi David, Thanks, Br. Umar On Tue, Jan 21, 2014 at 5:55 PM, David Sommerseth < openvpn.l...@topphemmelig.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 21/01/14 05:46, Umar Draz wrote: > > Hi > > > > I am running openvpn with ldap authentication, running fine, but > > th

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
hello, no, I did not set this up. I cannot contact the person who did. Indeed, it would be better to start over from scratch. Still, I would like to understand what went wrong. It do see in the Openvpn docs the advise to copy easy-rsa away from /usr/local/openvpn so not to be overwritten by u

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Jan Just Keijser
Hi Johan, Johan Vermeulen wrote: yes. against better judgment, I'm trying everything that has " key" written in it, e.g. /data0/etc/ssl/servercerts/serverkey.pem did you set this up originally? if not, perhaps you can ask the person who did? there is an off-chance that the original ca.key wa

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
yes. against better judgment, I'm trying everything that has " key" written in it, e.g. /data0/etc/ssl/servercerts/serverkey.pem op 21-01-14 14:23, Joe Patterson schreef: The directory listing you sent me earlier had /usr/share/openvpn/easy-rsa/2.0/keys/ca.key and ca.key.orig. -Joe On Tue,

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Joe Patterson
The directory listing you sent me earlier had /usr/share/openvpn/easy-rsa/2.0/keys/ca.key and ca.key.orig. -Joe On Tue, Jan 21, 2014 at 8:22 AM, Johan Vermeulen wrote: > hello, > > I'm unable to find the key.pem or the *.key > > What I don't understand is: I do have a backup. > And the setup o

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
hello, I'm unable to find the key.pem or the *.key What I don't understand is: I do have a backup. And the setup on the original Opensuse-server is still there, from different versions of Openvpn I just can't find the keys. I don't understand it. minas:~ # locate easy-rsa /data0/usr/share/o

Re: [Openvpn-users] openvpn with ldap

2014-01-21 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21/01/14 05:46, Umar Draz wrote: > Hi > > I am running openvpn with ldap authentication, running fine, but > there is a problem. > > The username and password windows popup after sometime, then I need > to put the username and password, even my co

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Jan Just Keijser
Hi Johan, Johan Vermeulen wrote: hello All, thanks again for helping me out, this is great. So getting a ca.pem from a backup, and a client certificate that was made before the trouble, I get: [root@caw-server1 keys]# openssl verify -CAfile ca.pem elien-crt.pem /etc/pki/tls/certs/servercer

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Joe Patterson
openssl x509 -noout -modulus -in ca.pem then look for a key where the output of: openssl rsa -noout -modulus -in file.key matches. -Joe On Tue, Jan 21, 2014 at 6:43 AM, Johan Vermeulen wrote: > hello All, > > thanks again for helping me out, this is great. > > So getting a ca.pem from a bac

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
hello All, thanks again for helping me out, this is great. So getting a ca.pem from a backup, and a client certificate that was made before the trouble, I get: [root@caw-server1 keys]# openssl verify -CAfile ca.pem elien-crt.pem /etc/pki/tls/certs/servercert.pem elien-crt.pem: OK /etc/pki/t

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Jan Just Keijser
Hi Johan, Johan Vermeulen wrote: > Dear All, > > since a long time we have an Openvpn-server, now on Centos6, > originaly setup on OpenSuse > > [root@caw-server1 2.0]# rpm -qa openvpn > openvpn-2.3.1-3.el6.x86_64 > > It is very reliable, and my only activity on it, is generate new client > keys.

Re: [Openvpn-users] Openvpn -- unable to generate keys

2014-01-21 Thread Johan Vermeulen
hello, thanks for the reaction. openssl-1.0.0-27.el6_4.2.x86_64 That seems to me like it's the standard openssl for the Centos version we are running on that server. As far as I can tell, the server has not been updated recently. greetings, J. op 21-01-14 02:54, net_robber schreef: > which