From d712e157951ff52dd3b4230c76403eda8f91755d Mon Sep 17 00:00:00 2001 From: Angristan Date: Sun, 18 Jun 2017 21:12:25 +0200 Subject: [PATCH] Support OpenSSL 1.1.0 DH generation Fixes dh.pem gen on Debian 9 and Arch Linux https://github.com/Angristan/OpenVPN-install/issues/64 https://github.com/Angristan/OpenVPN-install/issues/74 https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#openssl-issues --- openvpn-install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index e8dc561..457fab0 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -403,7 +403,7 @@ WantedBy=multi-user.target" > /etc/systemd/system/rc-local.service # Create the PKI, set up the CA, the DH params and the server + client certificates ./easyrsa init-pki ./easyrsa --batch build-ca nopass - openssl dhparam $DH_KEY_SIZE -out dh.pem + openssl dhparam -out dh.pem $DH_KEY_SIZE ./easyrsa build-server-full server nopass ./easyrsa build-client-full $CLIENT nopass ./easyrsa gen-crl