Package: openvpn
Version: 2.0-3
Severity: wishlist

The openvpn 2.0 howto (http://openvpn.net/howto.html) assumes that the 
openssl.cnf file in easy-rsa is being used. 
This seems to make more sense than using the system openssl.cnf because the 
openvpn version uses settings in vars for
key size and key file location so that the user can simply edit one file as per 
the openvpn 2.0 howto.

The problem is that vars by default expects the file openssl.cnf in easy-rsa 
but you have compressed openssl.cnf so it can't be read.
This causes ./build-ca to fail. openssl.cnf must be gunzip'd first. Could you 
include openssl.cnf in an uncrompressed form so that 
users can simply follow the instructions on openvpn's site? The openvpn docs 
don't even mention openssl.cnf because the expectation is that all
configuration will be done through the vars file.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-2-386
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages openvpn depends on:
ii  debconf                     1.4.51       Debian configuration management sy
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  liblzo1                     1.08-2       data compression library
ii  libssl0.9.7                 0.9.7g-1     SSL shared libraries

openvpn recommends no packages.

-- debconf information:
  openvpn/change_init: true
* openvpn/stop2upgrade: false
  openvpn/default_port:
* openvpn/create_tun: true


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to