FS#55298 - [easy-rsa] init-pki error

Attached to Project: Arch Linux
Opened by Kirill Goncharov (xuhcc) - Saturday, 26 August 2017, 10:55 GMT
Last edited by Eli Schwartz (eschwartz) - Thursday, 28 September 2017, 16:42 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Christian Hesse (eworm)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:

easy-rsa init-pki command results in the following error:

$ cd /etc/easy-rsa
$ easyrsa init-pki

Easy-RSA error:

The OpenSSL config file cannot be found.
Expected location: /usr/bin/openssl-1.0.cnf


Works only if EASYRSA variable is provided:

$ EASYRSA=/etc/easy-rsa easyrsa init-pki

Package version:

* easy-rsa 3.0.3-1
This task depends upon

Closed by  Eli Schwartz (eschwartz)
Thursday, 28 September 2017, 16:42 GMT
Reason for closing:  Fixed
Additional comments about closing:  easy-rsa 3.0.3-2
Comment by loqs (loqs) - Thursday, 31 August 2017, 00:39 GMT
This seems to be an upstream issue to me more than a packaging / integration one.
https://github.com/OpenVPN/easy-rsa/commit/534f67345997603e3b1fbf6b673bbaa65937019e appears to be the cause of the issue.
Comment by loqs (loqs) - Thursday, 31 August 2017, 13:03 GMT
This does appear to an integration issue in so much as it seems the easyrsa script expects to be in the same directory as openssl-1.0.cnf.
Moving the easyrsa script to /etc/easy-rsa/easyrsa and creating a wrapper shell script to place in /usr/bin that calls the actual script in /etc/easy-rsa solves the issue.
Or document the need to use the EASYRSA var.
Comment by GI Jack (GI_Jack) - Wednesday, 13 September 2017, 04:47 GMT
Confirmed. Hit me too. voted
Comment by Luca Weiss (z3ntu) - Thursday, 28 September 2017, 08:00 GMT
bump, very annoying and breaking commands that worked before
Comment by Christian Hesse (eworm) - Thursday, 28 September 2017, 09:18 GMT
Does easy-rsa 3.0.3-2 work for you?
Comment by Luca Weiss (z3ntu) - Thursday, 28 September 2017, 11:05 GMT
Yes, it works for me. Thanks.

Loading...