OPENVPN老是生成不了證書
大家有沒有遇到這樣的問題..OPENVPN生成證書時老出錯.
我的openssl是 OpenSSL 0.9.8h 28 May 2008
openvpn是OpenVPN 2.09
環景:CentOs 5.2
# ./build-dh
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
....................................................................................+.......................+ ..+...............................+.....................................+...................+............+... ..............................................................................................+.............. ...................................+......................................................................... .......................................+.........+.......................+..+................................ .........................................................+.....+............+................................ +......................................................+.......+..................+.......................... .....+............+.............+..................+......................+.................................. .....................................................................+...+................................... ...+..................................+...............................+.............+........................ .........................+....................................+..........+................................... .......................................++*++*++*
# ./build-key-server server
Generating a 1024 bit RSA private key
...++++++
..............++++++
writing new private key to 'server.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) :CN
State or Province Name (full name) :GD
Locality Name (eg, city) :zhongshan
Organization Name (eg, company) :kam
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) :VPNServer1
Email Address [zsgooo@gmail.com]:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:123456
Error adding attribute
1886:error:0D0BA041:asn1 encoding routines:ASN1_STRING_set:malloc failure:asn1_lib.c:381:
1886:error:0D0CC041:asn1 encoding routines:ASN1_EX_C2I:malloc failure:tasn_dec.c:1046:
1886:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:tasn_dec.c:710:
1886:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:338:Field=value.set, Type=X509_ATTRIBUTE
1886:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:tasn_dec.c:749:Field=, T ype=X509_ATTRIBUTE
problems making Certificate Request
/usr/local/src/openvpn-2.0.9/easy-rsa/2.0/pkitool: line 353: 1886 Segmentation fault $OPENSSL req $BATC H -days $KEY_EXPIRE $NODES_REQ -new -newkey rsa:$KEY_SIZE -keyout "$KEY_CN.key" -out "$KEY_CN.csr" $REQ_EXT - config "$KEY_CONFIG" $PKCS11_ARGS
《解決方案》
openssl重新裝下試試
