A
A
Alex Helber2018-11-29 18:44:28
openvpn
Alex Helber, 2018-11-29 18:44:28

OpenWRT: OPKG installs the openvpn-easy-rsa package without the PKI generation scripts. How to decide?

Good day, friends!
I'm trying to file an OpenVPN server on Keenetic Omni with OpenWRT on board.
It seems to be nothing complicated if OPKG normally installed the openssl-easy-rsa package.
The fact is that in the folder with the package there is not a single script for generating keys.
Can someone tell me where to dig?
PS Do not offer to generate PKI on a third-party machine.

[email protected]:/etc/easy-rsa# ls -l
drwxr-xr-x    2 root     root             0 Nov 29 14:52 keys
-rw-r--r--    1 root     root          4560 Jul 22 22:29 openssl-1.0.cnf
drwx------    4 root     root             0 Jul 22 22:29 pki
-rw-r--r--    1 root     root          8126 Jul 22 22:29 vars
drwxr-xr-x    2 root     root             0 Nov 29 12:37 x509-types

[email protected]:/etc/easy-rsa# build-ca
-ash: build-ca: not found

[email protected]:/etc/easy-rsa# opkg list-installed | grep openvpn
openvpn-easy-rsa - 3.0.1-1
openvpn-openssl - 2.4.5-4

[email protected]:/etc/easy-rsa# ./build-ca
-ash: ./build-ca: not found

[email protected]:/# find -name build-ca
[email protected]:/#

[email protected]:/# opkg files openvpn-easy-rsa
Package openvpn-easy-rsa (3.0.1-1) is installed on root and has the following files:
/usr/sbin/easyrsa
/etc/easy-rsa/x509-types/ca
/lib/upgrade/keep.d/openvpn-easy-rsa
/etc/easy-rsa/openssl-1.0.cnf
/etc/easy-rsa/x509-types/client
/etc/easy-rsa/vars
/etc/easy-rsa/x509-types/COMMON
/etc/easy-rsa/x509-types/server

Answer the question

In order to leave comments, you need to log in

2 answer(s)
K
ky0, 2018-11-29
@ky0

In general, you expressed quite a sound idea about the generation on a more suitable device :)
Why do you need a package? EasyRSA is perfectly cloned directly from the repository and does not require any compilation as far as I know.

N
noksel, 2019-11-23
@noksel

so everything is done through /usr/sbin/easyrsa with parameters.
for example easyrsa build-ca.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question