DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Packages and Ports

OpenBSD Packages and Ports Installation and upgrading of packages and ports on OpenBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 17th August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default variable has no value:/usr/src/lib/libcrypto/conf/conf_def.c:563:line 3

Hi,

I have installed the latest version of OpenBSD 6.1 and tried to install OpenVPN on it. When I run the command ./easyrsa init-pki it triggers the following error

Code:
variable has no value:/usr/src/lib/libcrypto/conf/conf_def.c:563:line 3
I'm using easyrsa3.

What should I do to get rid of this error and install OpenVPN successfully on my latest OpenBSD firewall?

Thanks
Reply With Quote
  #2   (View Single Post)  
Old 17th August 2017
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,981
Default

I'll guess that you have an error in your OpenSSL configuration file, as that particular library module which produced the error is used to parse OpenSSL configuration files.

Disclaimer: I am not an openvpn user.

I am unable to recreate your problem with the example configuration supplied in the easy-rsa package. I installed both the openvpn and the easy-rsa packages on a 6.1 test system, and obtained the following results.
Code:
$ pwd
/usr/local/share/easy-rsa
$ ls
COPYING              README.quickstart.md easyrsa              openssl-1.0.cnf      x509-types
ChangeLog            doc                  gpl-2.0.txt          vars.example
$ ./easyrsa init-pki
mkdir: /usr/local/share/easy-rsa/pki: Permission denied

Easy-RSA error:

Failed to create PKI file structure (permissions?)
$ doas ./easyrsa init-pki

init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: /usr/local/share/easy-rsa/pki

$
Reply With Quote
  #3   (View Single Post)  
Old 17th August 2017
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,981
Default

For clarity, this was with the easy-rsa package for OpenBSD. Here is a list of the installed packages on the test system:
Code:
$ pkg_info
easy-rsa-3.0.1      small RSA key management package
lz4-1.7.4.2         fast BSD-licensed data compression
lzo2-2.10           portable speedy lossless data compression library
openssl-1.0.2k      TLS/SSL library and tools
openvpn-2.4.1       easy-to-use, robust, and highly configurable VPN
quirks-2.304        exceptions to pkg_add rules
Reply With Quote
  #4   (View Single Post)  
Old 17th August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

Thanks for the information. I have installed NtopNG on my OpenBSD 6.1 firewall. Then I tried to install OpenVPN on it. Below is the output of the pkg_info command

# pkg_info
GeoIP-1.6.5p5 find the country where IP address/hostname originates from
bzip2-1.0.6p8 block-sorting file compressor, unencumbered
cairo-1.14.8 vector graphics library
curl-7.53.1 get files from FTP, Gopher, HTTP or HTTPS servers
cvsps-2.1p0 generate patchsets from CVS repositories
geolite-asn-20170208 GeoIP GeoLite database: IPv4/v6 address to AS number
geolite-city-20170208 GeoIP GeoLite database: IPv4/v6 address to city
geolite-country-20170208 GeoIP GeoLite database: IPv4/v6 address to country
gettext-0.19.8.1 GNU gettext runtime libraries and programs
git-2.12.2 GIT - Tree History Storage Tool
glib2-2.50.3 general-purpose utility library
graphite2-1.3.9 rendering for complex writing systems
harfbuzz-1.4.5 text shaping library
json-c-0.12p1 JSON implementation in C
libelf-0.8.13p3 read, modify, create ELF files on any arch
libffi-3.2.1p2 Foreign Function Interface
libhiredis-0.13.3 minimalistic C client for Redis
libiconv-1.14p3 character set conversion library
libsodium-1.0.12p0 library for network communications and cryptography
libxml-2.9.4p0 XML parsing library
lua-5.1.5p6 powerful, light-weight programming language (version 5.1.5)
luajit-2.0.4p0 just-in-time compiler for Lua
lz4-1.7.4.2 fast BSD-licensed data compression
lzo2-2.10 portable speedy lossless data compression library
mariadb-client-10.0.30v1 multithreaded SQL database (client)
nghttp2-1.21.0 library for HTTP/2
ntopng-2.4p0 network traffic probe with web ui and dpi
openvpn-2.4.1 easy-to-use, robust, and highly configurable VPN
p5-Error-0.17024 error/exception handling in an OO-ish way
pango-1.40.4 library for layout and rendering of text
pcre-8.38p0 perl-compatible regular expression library
png-1.6.28 library for manipulating PNG images
python-2.7.13p0 interpreted object-oriented programming language
quirks-2.304 exceptions to pkg_add rules
redis-3.2.8 persistent key-value database
rrdtool-1.6.0p2 system to store and display time-series data
rrdupdate-1.6.0 lightweight update-only tool for rrdtool
rsync-3.1.2p0 mirroring/synchronization over low bandwidth links
sqlite3-3.17.0 embedded SQL implementation
Reply With Quote
  #5   (View Single Post)  
Old 17th August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Quote:
Originally Posted by jggimi View Post
I'll guess that you have an error in your OpenSSL configuration file, as that particular library module which produced the error is used to parse OpenSSL configuration files.

Disclaimer: I am not an openvpn user.

I am unable to recreate your problem with the example configuration supplied in the easy-rsa package. I installed both the openvpn and the easy-rsa packages on a 6.1 test system, and obtained the following results.
Code:
$ pwd
/usr/local/share/easy-rsa
$ ls
COPYING              README.quickstart.md easyrsa              openssl-1.0.cnf      x509-types
ChangeLog            doc                  gpl-2.0.txt          vars.example
$ ./easyrsa init-pki
mkdir: /usr/local/share/easy-rsa/pki: Permission denied

Easy-RSA error:

Failed to create PKI file structure (permissions?)
$ doas ./easyrsa init-pki

init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: /usr/local/share/easy-rsa/pki

$
I installed easy-rsa3 using the following information

Code:
git clone https://github.com/OpenVPN/easy-rsa.git
Code:
cp -R /home/user/easyrsa/easyrsa3 /etc/openvpn/
Reply With Quote
  #6   (View Single Post)  
Old 17th August 2017
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,981
Default

I'm sorry I have not been sufficiently clear. To correct your error:
  1. Remove your manually installed version of easy-rsa.
  2. Install and use the OpenBSD package.
Remove your manually installed version of easy-rsa, then issue these three commands:
  1. # pkg_add easy-rsa
  2. # cd /usr/local/share/easy-rsa
  3. # ./easyrsa init-pki
Reply With Quote
  #7   (View Single Post)  
Old 17th August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

Thanks for the information. Will pkg_add command install easy-rsa3 ? easy-rsa 3 is much more easier than easy-rsa 2.
Reply With Quote
  #8   (View Single Post)  
Old 17th August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

Sorry. I check the package repository. It shows easy-rsa-3.0.1.tgz so it should be easy-rsa3. Will get back to you after installing this. Thanks for the help.
Reply With Quote
  #9   (View Single Post)  
Old 17th August 2017
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,981
Default

As already noted above, in the output from my test system:
Code:
$ pkg_info
easy-rsa-3.0.1 ...
Reply With Quote
Old 21st August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

Thanks Jggimi! Perfect easy-rsa key generatoion, worked. Still the client cannot connect to the open VPN server. I think that might due to miss configuration. I have created a folder on etc by the name openvpn and put the server.conf file in it, and started the open vpn server by entering the command " /usr/local/sbin/openvpn --daemon --config /etc/openvpn/server.conf "
Reply With Quote
Old 21st August 2017
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,981
Default

I can only see what you post. Since you have not shared any configuration information, or any connection logs, my only recommendation is to review the README file included with the OpenVPN package that was prepared specifically for OpenBSD users. You'll find it in /usr/local/share/doc/pkg-readmes/.
Reply With Quote
Old 22nd August 2017
Amithapr Amithapr is offline
Fdisk Soldier
 
Join Date: Dec 2015
Posts: 69
Default

Hi Jggimi,

I refer that manual as well. I checked everything from the scratch and make some small changes. NOW OPEN VPN IS WORKING PERFECTLY.

THANKS FOR YOUR SUPPORT.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
dhclient.conf: line 2: expecting a statement? WeoNat OpenBSD General 5 29th March 2016 04:09 PM
pf.conf place multiple tables in one variable daemonbak OpenBSD Security 1 21st July 2015 10:12 AM
Python: Use the value of a variable for calling another variable Carpetsmoker Programming 13 5th April 2009 05:53 PM
CSH 'mch' variable? JMJ_coder General software and network 1 12th February 2009 11:24 PM
Using Date variable? cwhitmore FreeBSD General 9 13th August 2008 07:16 AM


All times are GMT. The time now is 02:41 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick