fido2 icon indicating copy to clipboard operation
fido2 copied to clipboard

Incorrect path to openssl.cnf on Ubuntu 18

Open cyberphone opened this issue 4 years ago • 7 comments

The file keygen-jwt.sh contains a line OPENSSL_CNF_PATH= holding a path which doesn't match Ubuntu. It makes installation fail. This is the proper path for Ubuntu 18.*: /usr/lib/ssl/openssl.cnf

cyberphone avatar Apr 04 '21 14:04 cyberphone

I found mine under /etc/ssl/openssl.cnf they might point towards the same file and are symlinked together.

Or is just the difference between 18 and 20.

F9Alejandro avatar Apr 18 '21 09:04 F9Alejandro

It is apparently something that more than I have had a problem with: https://stackoverflow.com/questions/37035300/how-to-determine-the-default-location-for-openssl-cnf

I also had to change this line: #RANDFILE = $ENV::HOME/.rnd

OpenSSL does no longer depend on this setting

cyberphone avatar Apr 18 '21 11:04 cyberphone

true they use their own pseudorandom generator. However it might be better to use the urandom since it might help with the security flaw in ssl about the certificate date being part of the seed.

F9Alejandro avatar Apr 18 '21 14:04 F9Alejandro

This may be correct but this setting didn't work (according to the build script) on Ubuntu 18.04 which is why I disabled it.

cyberphone avatar Apr 18 '21 15:04 cyberphone

I don't receive any errors like that. Could be because I don't have the verbose on, only errors I normally would get is incomplete downloads so I would delete the one that was causing the issue and just have it redownload. Should really make new keystores before doing an install so it has the proper certs in them. Same with the ldif files I should probably edit those to have the right cn and such to work with the FQDN.

F9Alejandro avatar Apr 19 '21 14:04 F9Alejandro

I'm an Ubuntu n00b. Anyway, random number thing only generated a warning that rnd file couldn't be created or is not available.

cyberphone avatar Apr 19 '21 14:04 cyberphone

huh, think it was /dev/urandom or something of the sort.

F9Alejandro avatar Apr 19 '21 14:04 F9Alejandro