Still OpenSSL produced an error: 256 while generating OVPN root certificates

Networking
7

Okay, here are the steps.

  1. Run the command cp /var/ipfire/ovpn/openssl/ovpn.cnf /var/ipfire/ovpn/openssl/ovpn.cnf.orig. This creates a backup copy.

  2. Run the command chown nobody:nobody /var/ipfire/ovpn/openssl/ovpn.cnf.orig. This changes the owner from root to nobody, in case you need to use this backup file.

  3. Run the command nano -l /var/ipfire/ovpn/openssl/ovpn.cnf. This will open the nano editor with line numbers shown. Remove the lines 88 & 87 and exit from editor saving the changes.
    These lines should have the contents

subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always

  1. Run the Generate root/host certificates command on the OpenVPN WUI page. It should work successfully now.

  2. If the changes work then you can delete the ovpn.cnf.orig file.

4 Likes