openvpn-install: Can't connect to the VPN, RNG errors

Ubuntu server 18.04.2, all packages up-to-date OpenVPN 2.4.4

Client can’t connect. What I’ve noticed is while generating a new client with the script, I get a few random generation errors:

Note: using Easy-RSA configuration from: ./vars

Using SSL: openssl OpenSSL 1.1.1  11 Sep 2018
Can't load /etc/openvpn/easy-rsa/pki/.rnd into RNG
140170845053376:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/etc/openvpn/easy-rsa/pki/.rnd
Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/private/testclient.key.PiXLGaC9UC'
-----
Using configuration from /etc/openvpn/easy-rsa/pki/safessl-easyrsa.cnf
Can't load /etc/openvpn/easy-rsa/pki/.rnd into RNG
140041032360384:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/etc/openvpn/easy-rsa/pki/.rnd
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName            :ASN.1 12:'testclient'
Certificate is to be certified until Jun 10 14:13:12 2022 GMT (1080 days)

Write out database with 1 new entries
Data Base Updated

Client testclient added, the configuration file is available at /home/user/testclient.ovpn.
Download the .ovpn file and import it in your OpenVPN client.

Also I’ve noticed that the .ovpn files are a lot smaller than they used to be in older script releases. My old scripts with cipher AES-128-CBC, tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 and tls-auth are 219 lines, while the file generated with this installation (default security settings) only gives files 76 lines long. Maybe these two things are related?

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 18 (9 by maintainers)

Most upvoted comments

Yes, afaik it’s not really problematic