easy-rsa not working with openssl 1.1

Bug #1793301 reported by Xavier Poinsard
50
This bug affects 10 people
Affects Status Importance Assigned to Milestone
easy-rsa (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

/usr/share/easy-rsa/whichopensslcnf script is not working when openssl 1.1.X is installed.
The script does not expect a version greater than 1.0.Xy
As a workaround, a openssl.cnf can be created manually from openssl-1.0.0.cnf

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: easy-rsa 2.2.2-2
ProcVersionSignature: Ubuntu 4.15.0-34.37-generic 4.15.18
Uname: Linux 4.15.0-34-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.3
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Wed Sep 19 14:12:28 2018
DistributionChannelDescriptor:
 # This is a distribution channel descriptor
 # For more information see http://wiki.ubuntu.com/DistributionChannelDescriptor
 canonical-oem-somerville-xenial-amd64-20160624-2
InstallationDate: Installed on 2017-03-24 (544 days ago)
InstallationMedia: Ubuntu 16.04 "Xenial" - Build amd64 LIVE Binary 20160624-10:47
PackageArchitecture: all
SourcePackage: easy-rsa
UpgradeStatus: Upgraded to bionic on 2018-08-29 (20 days ago)

Revision history for this message
Xavier Poinsard (xpoinsard) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in easy-rsa (Ubuntu):
status: New → Confirmed
Revision history for this message
Johan Ehnberg (johan-ehnberg) wrote :

Here is a one-line to work around the issue:
    sed -i 's#export KEY_CONFIG.*#export KEY_CONFIG="$EASY_RSA/openssl-1.0.0.cnf"#' /home/ubuntu/openvpn-ca/vars

Revision history for this message
Jacques-D. Piguet (jacques-piguet) wrote :

Same problem, using the command below as workaround:
   ln -s openssl-1.0.0.cnf openssl.cnf

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.