TASK [strongswan : Build the client's pair] #14328
Unanswered
warmmilkdrinker
asked this question in
Q&A
Replies: 1 comment
-
Post the section of your output after this line:
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
TASK [strongswan : Build the client's pair] *************************************************************************************************************************************************************************************************
failed: [143.198.42.198] (item=phone) => {"ansible_loop_var": "item", "changed": true, "cmd": "umask 077; openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:phone@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -keyout private/phone.key -out reqs/phone.req -nodes -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=phone" -batch && openssl ca -utf8 -in reqs/phone.req -out certs/phone.crt -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:phone@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -days 3650 -batch -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=phone" && touch certs/phone_crt_generated\n", "delta": "0:00:00.117942", "end": "2021-10-20 22:36:53.698074", "item": "phone", "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 22:36:53.580132", "stderr": "Generating an EC private key\nwriting new private key to 'private/phone.key'\n-----\nUsing configuration from /dev/fd/62\nunable to load CA private key\n140345845617280:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:\n140345845617280:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:\n140345845617280:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:\n140345845617280:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:", "stderr_lines": ["Generating an EC private key", "writing new private key to 'private/phone.key'", "-----", "Using configuration from /dev/fd/62", "unable to load CA private key", "140345845617280:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:", "140345845617280:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:", "140345845617280:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:", "140345845617280:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:"], "stdout": "", "stdout_lines": []}
ok: [143.198.42.198] => (item=laptop)
failed: [143.198.42.198] (item=desktop) => {"ansible_loop_var": "item", "changed": true, "cmd": "umask 077; openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:desktop@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -keyout private/desktop.key -out reqs/desktop.req -nodes -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=desktop" -batch && openssl ca -utf8 -in reqs/desktop.req -out certs/desktop.crt -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:desktop@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -days 3650 -batch -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=desktop" && touch certs/desktop_crt_generated\n", "delta": "0:00:00.128610", "end": "2021-10-20 22:36:55.080785", "item": "desktop", "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 22:36:54.952175", "stderr": "Generating an EC private key\nwriting new private key to 'private/desktop.key'\n-----\nUsing configuration from /dev/fd/62\nunable to load CA private key\n140687575225664:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:\n140687575225664:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:\n140687575225664:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:\n140687575225664:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:", "stderr_lines": ["Generating an EC private key", "writing new private key to 'private/desktop.key'", "-----", "Using configuration from /dev/fd/62", "unable to load CA private key", "140687575225664:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:", "140687575225664:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:", "140687575225664:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:", "140687575225664:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:"], "stdout": "", "stdout_lines": []}
included: /home/fag2/algo/playbooks/rescue.yml for 143.198.42.198
TASK [debug] ********************************************************************************************************************************************************************************************************************************
ok: [143.198.42.198] => {
"fail_hint": [
"Sorry, but something went wrong!",
"Please check the troubleshooting guide.",
"https://trailofbits.github.io/algo/troubleshooting.html"
]
}
TASK [Fail the installation] ****************************************************************************************************************************************************************************************************************
fatal: [143.198.42.198]: FAILED! => {"changed": false, "msg": "Failed as requested from task"}
Ive been stuck on this, and have reset the config files many times. anything helps ^^
Beta Was this translation helpful? Give feedback.
All reactions