Estou tentando executar build-key-pkcs12 user no meu OpenWRT NSLU2 para gerar algumas chaves de cliente para os usuários da minha VPN. Tudo funciona normalmente até chegar à parte enter export password , e o terminal SSH congela completamente. Enter não faz absolutamente nada, e o prompt apenas trava e não aceita entrada. Estou usando o PUTTY no Windows 7.
Eu tenho seguido este guia.
Telnet faz exatamente a mesma coisa.
# cat /proc/version
Linux version 3.3.8 (blogic@Debian-60-squeeze-64-minimal) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Sun Mar 24 00:20:13 UTC 2013
Saída do comando:
root@OpenWrt:/etc/easy-rsa/keys# build-key-pkcs12 u
NOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/easy-rsa/keys
Generating a 1024 bit RSA private key
.......++++++
...................++++++
writing new private key to 'u.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [UK]:
State or Province Name (full name) [(removed)]:
Locality Name (eg, city) [(removed)]:
Organization Name (eg, company) [N/A]:
Organizational Unit Name (eg, section) [N/A]:
Common Name (eg, your name or your server's hostname) [u]:
Name [George]:
Email Address [test@localhost]:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from /etc/easy-rsa/openssl-1.0.0.cnf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'UK'
stateOrProvinceName :PRINTABLE:'(hidden)'
localityName :PRINTABLE:'(hidden)'
organizationName :PRINTABLE:'N/A'
organizationalUnitName:PRINTABLE:'N/A'
commonName :PRINTABLE:'u'
name :PRINTABLE:'George'
emailAddress :IA5STRING:'test@localhost'
Certificate is to be certified until Aug 5 00:01:55 2025 GMT (3650 days)
Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
Enter Export Password:
Aqui é onde o terminal trava. Eu também tentei o Windows 7 Telnet, e isso faz a mesma coisa.
Como posso corrigir isso?
Existe outra maneira de gerar chaves de cliente sem usar este programa?
NOTA: Pressionar Enter não faz nada. O terminal não responde a nenhuma entrada, incluindo Ctrl + C
** EDIT: Ctrl + D faz o terminal responder, mas depois eu recebo Can't read password