TASK [strongswan : Build the client's pair] #14328
Unanswered
warmmilkdrinker
asked this question in
Q&A
Replies: 1 comment
-
Post the section of your output after this line:
|
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
TASK [strongswan : Build the client's pair] *************************************************************************************************************************************************************************************************
failed: [143.198.42.198] (item=phone) => {"ansible_loop_var": "item", "changed": true, "cmd": "umask 077; openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:phone@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -keyout private/phone.key -out reqs/phone.req -nodes -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=phone" -batch && openssl ca -utf8 -in reqs/phone.req -out certs/phone.crt -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:phone@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -days 3650 -batch -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=phone" && touch certs/phone_crt_generated\n", "delta": "0:00:00.117942", "end": "2021-10-20 22:36:53.698074", "item": "phone", "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 22:36:53.580132", "stderr": "Generating an EC private key\nwriting new private key to 'private/phone.key'\n-----\nUsing configuration from /dev/fd/62\nunable to load CA private key\n140345845617280:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:\n140345845617280:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:\n140345845617280:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:\n140345845617280:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:", "stderr_lines": ["Generating an EC private key", "writing new private key to 'private/phone.key'", "-----", "Using configuration from /dev/fd/62", "unable to load CA private key", "140345845617280:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:", "140345845617280:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:", "140345845617280:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:", "140345845617280:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:"], "stdout": "", "stdout_lines": []}
ok: [143.198.42.198] => (item=laptop)
failed: [143.198.42.198] (item=desktop) => {"ansible_loop_var": "item", "changed": true, "cmd": "umask 077; openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:desktop@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -keyout private/desktop.key -out reqs/desktop.req -nodes -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=desktop" -batch && openssl ca -utf8 -in reqs/desktop.req -out certs/desktop.crt -config <(cat openssl.cnf <(printf "[basic_exts]\nsubjectAltName=email:desktop@b181ac14-be7d-5fc6-836e-80234031e742.algo")) -days 3650 -batch -passin pass:"5TFtchlucHLs_Ogb" -subj "/CN=desktop" && touch certs/desktop_crt_generated\n", "delta": "0:00:00.128610", "end": "2021-10-20 22:36:55.080785", "item": "desktop", "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 22:36:54.952175", "stderr": "Generating an EC private key\nwriting new private key to 'private/desktop.key'\n-----\nUsing configuration from /dev/fd/62\nunable to load CA private key\n140687575225664:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:\n140687575225664:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:\n140687575225664:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:\n140687575225664:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:", "stderr_lines": ["Generating an EC private key", "writing new private key to 'private/desktop.key'", "-----", "Using configuration from /dev/fd/62", "unable to load CA private key", "140687575225664:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:../crypto/evp/evp_enc.c:610:", "140687575225664:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:../crypto/pkcs12/p12_decr.c:62:", "140687575225664:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:../crypto/pkcs12/p12_decr.c:93:", "140687575225664:error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib:../crypto/pem/pem_pkey.c:88:"], "stdout": "", "stdout_lines": []}
included: /home/fag2/algo/playbooks/rescue.yml for 143.198.42.198
TASK [debug] ********************************************************************************************************************************************************************************************************************************
ok: [143.198.42.198] => {
"fail_hint": [
"Sorry, but something went wrong!",
"Please check the troubleshooting guide.",
"https://trailofbits.github.io/algo/troubleshooting.html"
]
}
TASK [Fail the installation] ****************************************************************************************************************************************************************************************************************
fatal: [143.198.42.198]: FAILED! => {"changed": false, "msg": "Failed as requested from task"}
Ive been stuck on this, and have reset the config files many times. anything helps ^^
Beta Was this translation helpful? Give feedback.
All reactions