lkeijser / stonevpn Goto Github PK

When trying to generate new certificates with stonevpn, I receive this traceback:

[root@rioja ~]# stonevpn -f lilypad -n lilypad
Creating lilypad.key and lilypad.crt for lilypad
Traceback (most recent call last):
File "/usr/bin/stonevpn", line 18, in <module>
  sys.exit(app.main() or 0)
File "/usr/lib/python2.6/site-packages/StoneVPN/app.py", line 226, in main
  s.run()
File "/usr/lib/python2.6/site-packages/StoneVPN/app.py", line 330, in run
  self.makeCert( self.fname, self.cname )
File "/usr/lib/python2.6/site-packages/StoneVPN/app.py", line 680, in makeCert
  req = self.createCertRequest(pkey, CN=cname, C=countryName, ST=stateOrProvinceName, O=organizationName, OU=organizationalUnitName)
File "/usr/lib/python2.6/site-packages/StoneVPN/app.py", line 533, in createCertRequest
  setattr(subj, key, value)
OpenSSL.crypto.Error: [('asn1 encoding routines', 'ASN1_mbstring_ncopy', 'string too short')]

Any ideas?

Executing stonevpn -a lists existing certificates just fine.

stonevpn 0.4.7 on Fedora 12 (x86_64)

File "/usr/local/bin/stonevpn", line 17, in
import StoneVPN.app as app
File "/home/andre/projects/stonevpn/StoneVPN/app.py", line 40, in
from configobj import ConfigObj
ImportError: No module named configobj

Ubuntu 11.10

Hi,

Just wonder if you have any plan to includ the code of expanding the $ENV:<env_name> variables while parsing the openssl.cnf file? This seem to be a standard openssl.cnf format and a lot of application using this format, including the easy-rsa that are recommended by a lot of OpenVPN's how-to document.

rgds.

Hi,
don't know if because of the latest Android versions (tested with 7 and 8), or because of new OpenVPN client versions for Android, I had problems importing the configuration files and the certificates with Android OpenVPN client. There was no way to let the app find the related certificate files.

I was able to manually hack the configuration file and embed all the certificates in the configuration file itself, by using a syntax like .... .

Refs:

• https://github.com/schwabe/ics-openvpn
• https://www.brainfart.sg/index.php/2012/05/embedding-certificate-into-openvpn-config/
• https://community.openvpn.net/openvpn/wiki/IOSinline

It would be great if StoneVPN could manage that syntax as well.

As you can see in https://www.centos.org/forums/viewtopic.php?f=50&t=47210 md5 support has been removed as it's no longer regarded as secure (even by Microsoft).
The certs generated by stonevpn can no longer be used to connect to the openvpn server on CentOS 7.x (6.x is OK).

It works if I modify /etc/systemd/system/[email protected] file by adding:
[Service]
Environment="OPENSSL_ENABLE_MD5_VERIFY=1 NSS_HASH_ALG_SUPPORT=+MD5"

I see there is digest="md5" in a few places in /lib/python2.7/site-packages/StoneVPN/app.py. What can I use instead of "md5" here?