openvpn-pihole icon indicating copy to clipboard operation
openvpn-pihole copied to clipboard

Can't start the VPN after specifying certificate REQ_ fields

Open raulillo82 opened this issue 11 months ago • 1 comments

Checklist

Please review these questions and check them to make sure noone has asked this before:

  • [x] I'm using the latest version (you pulled the latest version of this repository)
  • [x] I've searched through all the issues (if any) for this bug
  • [x] I've checked out the FAQ section

What is the current behavior?

Container for the openvpn won't start

What is the expected behavior?

Container for the openvpn should start

Steps to reproduce

Default installation, just changed this:

In docker-compose, openvpn container:

environment:
      REQ_COUNTRY: ES
      REQ_PROVINCE: Araba
      REQ_CITY: Vitoria-Gasteiz
      REQ_ORG: Copyleft Certificate Co
      REQ_OU: My Organizational Unit
      REQ_CN: MyOpenVPN

I renamed containers to "openvpn_wan" and "pihole_wan" (have an internal pihole running).

Screenshots

Your environment

  • OS (e.g. Windows 10 Pro): openSUSE Leap 15.6 for aarch64 (Raspberry PI 4)
  • Docker version (see docker --version): Docker version 25.0.6-ce, build b08a51fe16ee
  • Docker-compose version (see docker-compose --version): docker-compose version 1.29.2, build unknown
  • PiHole-version (see dashboard, if needed):
  • OpenVPN-version (see openvpn --version, if needed):

Additional context and logs

Setting up public key infrastructure...

Generating ertificate authority...
Using SSL: openssl OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
Enter PEM pass phrase:
2080E4BBFFFF0000:error:1400006B:UI routines:UI_process:processing error:../crypto/ui/ui_lib.c:544:while reading strings
2080E4BBFFFF0000:error:0480006D:PEM routines:PEM_def_callback:problems getting password:../crypto/pem/pem_lib.c:62:
2080E4BBFFFF0000:error:07880109:common libcrypto routines:do_ui_passphrase:interrupted or cancelled:../crypto/passphrase.c:184:
2080E4BBFFFF0000:error:1C80009F:Provider routines:p8info_to_encp8:unable to get passphrase:../providers/implementations/encode_decode/encode_key2any.c:116:

Easy-RSA error:

Failed to build the CA

raulillo82 avatar Dec 18 '24 16:12 raulillo82

Hey! I never actually tried changing these, but could you try adjusting the variables you mention in openvpn/config/easy-rsa.vars as well so that they have the same value as you provide to the openvpn container? Might be an issue caused by having them set to a different value in one place but not another :)

simonwep avatar Dec 31 '24 14:12 simonwep