Unknown cert type 'ca' or 'server' or 'client'

[openvpn]

Unknown cert type 'ca' or 'server' or 'client'

[RobertLarsen]

I fixed my own problem. The x509-types directory needed to be located in the same directory as the 'easyrsa' script. I had created a new directory and simply symlinked the easyrsa script and the openssl-1.0.cnf file. After having symlinked x509-types everything worked.

[noah-seltzer]

@motorollo I had the same problem on windows, copying the /x509-types folder into the pki folder made it work for me

[mmrvelj]

I had this problem as well on Centos 7.7 with easyrsa-3.0.6 and found out that the issue is incorrect setting of the variable EASYRSA_EXT_DIR which is set in "vars" file. After correcting it to point to correct location of x509-types folder everything works as expected.

[RobertLarsen]

I'm seeing the same on Ubuntu 14.04:

$ ./easyrsa build-server-full VPN nopass
Generating a 2048 bit RSA private key
.....................+++
..+++
writing new private key to '/home/vagrant/CA/pki/private/VPN.key.f4i5UyAahh'
-----

Easy-RSA error:

Unknown cert type 'server'

[glafir]

Yes! Thanks! I already understanded this!

[RdL87]

Hi,
i'm facing the same issue on the following stack:

• CentOS Linux release 7.7.1908 (Core)
• OpenVPN 2.4.7 x86_64-redhat-linux-gnu
• Easy-RSA 3.0.6

Hi tried a solution that mentions this issue but i have always same error:

Note: using Easy-RSA configuration from: ./vars

Easy-RSA error:

Unknown cert type 'server'

[motorollo]

I use easyrsa-3.0.7 and OpenVPN-2.5.0-I601-amd64.msi and
easyrsa sign-req client rechner.domäne.de dosnt't work.
I get the message: Unknown cert type 'client'
The x509-types-folder is in place and a file client is there.
easyrsa-3.0.8, which is delivered with OpenVPN-2.5.0-I601-amd64.msi has other problems.

The solution with the sym-link is not suitable for Windows.
https://forum.openwrt.org/t/problem-in-openvpn-basic-instructions-and-workaround/39530