Friday 17 May 2019

Avoid losing the OpenVPN's CA data on EdgeOS

After updating the firmware of an EdgeRouter 8 to v2.0.1, all CA data stored initially at /usr/lib/ssl/misc/demoCA was lost:

- cacert.pem
- careq.pem
d certs
d crl
- crlnumber
- index.txt
- index.txt.attr
- index.txt.attr.old
- index.txt.old
d newcerts
d private
  - cacert.key
- serial
- serial.old

Luckily, I had the CA's certificate and private key stored at /config/auth, but not the rest of the files. In order not to lose these files next time I upgrade the firmware, I have moved the newly created demoCA directory to /config/auth, and updated the configuration file /etc/ssl/openssl.cnf. Where it says:

dir      = ./demoCA

I have changed it to: 

dir      = /config/auth/demoCA

No comments:

Post a Comment