CentOS - Jan 2011 - problems with OpenVPN 2.1.4 on Centos 5.5

Hello listmates,

I've got this Centos 5.5 box which I am trying to configure as an
OpenVPN server. Now 2.1.4 seems to have added pkcs11 support and that
stops me from creating the CA and other necessary files:


[root at gw5fl 2.0]# . ./vars
bash: /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/whichopensslcnf:
Permission denied
NOTE: If you run ./clean-all, I will be doing a rm -rf on
/usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/keys
[root at gw5fl 2.0]# ./clean-all
[root at gw5fl 2.0]# ./build-ca
  Please edit the vars script to reflect your configuration,
  then source it with "source ./vars".
  Next, to start with a fresh PKI configuration and to delete any
  previous certificates and keys, run "./clean-all".
  Finally, you can run this tool (pkitool) to build certificates/keys.
[root at gw5fl 2.0]#

Now, the tool I seem to need (from the "vars" file):

export PKCS11TOOL="pkcs11-tool"

does not seem to be there and I am not sure how to install it as I
couldn't find it.

So, any perspective on what this mess is all about and how to get out
of it would be much appreciated.

Thanks.

Boris.

>[root at gw5fl 2.0]# . ./vars
>bash: /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/whichopensslcnf:
>Permission denied
See that error above? Make that script executable... It's a bash script
`vars` is calling and not able to execute.

Boris,

Are you using bash?

Try this:
/bin/bash
. ./vars

--
Peter

On 01/20/2011 08:28 AM, Boris Epstein wrote:
> Hello listmates,
>
> I've got this Centos 5.5 box which I am trying to configure as an
> OpenVPN server. Now 2.1.4 seems to have added pkcs11 support and that
> stops me from creating the CA and other necessary files:
>
>
> [root at gw5fl 2.0]# . ./vars
> bash: /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/whichopensslcnf:
> Permission denied
> NOTE: If you run ./clean-all, I will be doing a rm -rf on
> /usr/share/doc/openvpn-2.1.4/easy-rsa/2.0/keys
> [root at gw5fl 2.0]# ./clean-all
> [root at gw5fl 2.0]# ./build-ca
>    Please edit the vars script to reflect your configuration,
>    then source it with "source ./vars".
>    Next, to start with a fresh PKI configuration and to delete any
>    previous certificates and keys, run "./clean-all".
>    Finally, you can run this tool (pkitool) to build certificates/keys.
> [root at gw5fl 2.0]#
>
> Now, the tool I seem to need (from the "vars" file):
>
> export PKCS11TOOL="pkcs11-tool"
>
> does not seem to be there and I am not sure how to install it as I
> couldn't find it.
>
> So, any perspective on what this mess is all about and how to get out
> of it would be much appreciated.
>
> Thanks.
>
> Boris.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos