Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Easy-RSA and CFSSL to support LibreSSL #182

Closed
MaxRenaud opened this issue Mar 23, 2021 · 4 comments · Fixed by #183
Closed

Update Easy-RSA and CFSSL to support LibreSSL #182

MaxRenaud opened this issue Mar 23, 2021 · 4 comments · Fixed by #183

Comments

@MaxRenaud
Copy link
Contributor

The Easy-RSA script used by this project is pull from:
https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz

According to the latest entry in the Changelog, it's an old version:
3.0.0-rc2 (2014/07/27)

This is preventing OS that use LibreSSL instead of OpenSSL from running make certs. See OpenVPN/easy-rsa#74. My OS is macOS Big Sur Version 11.2.3

Easy-RSA error:

Missing or invalid OpenSSL
Expected to find openssl command at: /usr/bin/openssl
4487372460:error:0EFFF068:configuration file routines:CRYPTO_internal:variable has no value:/AppleInternal/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-56.60.2/libressl-2.8/crypto/conf/conf_def.c:563:line 3

For troubleshooting purposes, I have manually copied https://github.com/OpenVPN/easy-rsa to the easy-rsa-master directory.

CFSSL also needs to be updated. The Makefile references version R1.2 from https://pkg.cfssl.org/. While this appears to be the latest version, it seems like it's no longer updated and the latest version is really 1.5.0. I have updated the Makefile to use version 1.5.0

I was able to run make certs

@MaxRenaud
Copy link
Contributor Author

/reopen

The PR only partially fixes this.

@k8s-ci-robot
Copy link
Contributor

@MaxRenaud: Reopened this issue.

In response to this:

/reopen

The PR only partially fixes this.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@k8s-ci-robot k8s-ci-robot reopened this Mar 23, 2021
@MaxRenaud
Copy link
Contributor Author

/close

#184 was merged and fixes this completely.

@k8s-ci-robot
Copy link
Contributor

@MaxRenaud: Closing this issue.

In response to this:

/close

#184 was merged and fixes this completely.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants