openvpn-install: Can't connect to the VPN, RNG errors
Ubuntu server 18.04.2, all packages up-to-date OpenVPN 2.4.4
Client can’t connect. What I’ve noticed is while generating a new client with the script, I get a few random generation errors:
Note: using Easy-RSA configuration from: ./vars
Using SSL: openssl OpenSSL 1.1.1 11 Sep 2018
Can't load /etc/openvpn/easy-rsa/pki/.rnd into RNG
140170845053376:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/etc/openvpn/easy-rsa/pki/.rnd
Generating an EC private key
writing new private key to '/etc/openvpn/easy-rsa/pki/private/testclient.key.PiXLGaC9UC'
-----
Using configuration from /etc/openvpn/easy-rsa/pki/safessl-easyrsa.cnf
Can't load /etc/openvpn/easy-rsa/pki/.rnd into RNG
140041032360384:error:2406F079:random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:88:Filename=/etc/openvpn/easy-rsa/pki/.rnd
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName :ASN.1 12:'testclient'
Certificate is to be certified until Jun 10 14:13:12 2022 GMT (1080 days)
Write out database with 1 new entries
Data Base Updated
Client testclient added, the configuration file is available at /home/user/testclient.ovpn.
Download the .ovpn file and import it in your OpenVPN client.
Also I’ve noticed that the .ovpn files are a lot smaller than they used to be in older script releases. My old scripts with cipher AES-128-CBC, tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 and tls-auth are 219 lines, while the file generated with this installation (default security settings) only gives files 76 lines long. Maybe these two things are related?
About this issue
- Original URL
- State: closed
- Created 5 years ago
- Comments: 18 (9 by maintainers)
Yes, afaik it’s not really problematic