Comment 6 for bug 489819

Revision history for this message
asifanwar (asif-anwar) wrote : Re: [Bug 489819] Re: Serverguide OpenVPN page has incorrect install instructions

Muhammad Asif Anwar
Cell No: +92-300-8885072begin_of_the_skype_highlighting              +92-300-8885072      end_of_the_skype_highlighting
Ph No: +92-608-362928begin_of_the_skype_highlighting              +92-608-362928      end_of_the_skype_highlighting
Pakistan.

________________________________
From: Tomas Cassidy <email address hidden>
To: <email address hidden>
Sent: Tue, March 30, 2010 4:18:33 AM
Subject: [Bug 489819] Re: Serverguide OpenVPN page has incorrect install instructions

I think there is either a bug in the docs or in one of the scripts/tools
used in the guide.

I got up to the section "Enter the following to create the server
certificates:".  After running the command "./pkitool --initca", it
generated the following output with the last line being continuously
repeated.  I had to hit ^C (CTRL-C) to exit the script and return to the
bash prompt (after waiting for ~2 mins for the script to stop scrolling
the last line).  I repeated the commands "./clean-all", "./build-dh",
and "./pkitool --initca" multiple times with the same result (except
that the amout of . and + characters printed from the pkitool output
changed every time).

$ ./pkitool --initca
Using CA Common Name: TEST_ORG CA
Generating a 1024 bit RSA private key
..........................++++++
....++++++
writing new private key to 'ca.key'
-----
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long
string is too long, it needs to be less than  2 bytes long

** Changed in: ubuntu-docs (Ubuntu)
      Status: Fix Released => Confirmed

--
Serverguide OpenVPN page has incorrect install instructions
https://bugs.launchpad.net/bugs/489819
You received this bug notification because you are subscribed to ubuntu-
docs in ubuntu.

Status in “ubuntu-docs” package in Ubuntu: Confirmed

Bug description:
Binary package hint: ubuntu-docs

$ lsb_release -a
No LSB modules are available.
Distributor ID:    Ubuntu
Description:    Ubuntu 9.10
Release:    9.10
Codename:    karmic

$ apt-cache policy openvpn
openvpn:
  Installed: 2.1~rc19-1ubuntu2
  Candidate: 2.1~rc19-1ubuntu2
  Version table:
*** 2.1~rc19-1ubuntu2 0
        500 http://mirror.optus.net karmic/main Packages
        100 /var/lib/dpkg/status

I tried to install and configure OpenVPN using the instructions provided at https://help.ubuntu.com/9.10/serverguide/C/openvpn.html but they appear to be incorrect.

eg.
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/ /etc/openvpn/" and "Next, edit /etc/openvpn/easy-rsa/vars adjusting the following to your environment: ".
The vars file appears to be copied to /etc/openvpn/2.0/vars using the provided instructions, but the user is told to edit it at /etc/openvpn/easy-rsa/vars.

"cd /etc/openvpn/easy-rsa/easy-rsa" gives "-bash: cd: /etc/openvpn/easy-rsa/easy-rsa: No such file or directory"

"./clean-all" gives "mkdir: cannot create directory `/etc/openvpn/easy-rsa/keys': Permission denied"
This command (and possibly others) appears to require sudo/root privs, but is not marked as such.  Only the final command in the list with that command uses sudo.

There are possibly other errors on this page as I haven't checked any further apart from the listed examples above.  I don't know enough about openvpn to say what the correct commands should be, but they are definitely incorrect in some places.