Amazon AWS (Amazon AMI) installing OpenVPN

I came across this issue as well. The solution I found was:

  1. Enable the EPEL repo (by default in Amazon Linux AMI it's disabled).
  2. Install easy-rsa with: yum install easy-rsa -y

You can temporarily enable the repo by adding --enablerepo=epel to your yum command. So yum install easy-rsa -y --enablerepo=epel will also do the trick.


Do this command to track those files down when an RPM is installed:

$ rpm -ql openvpn 

and see where those files might actually be. For packages that haven't been installed yet you can query the yum repository using the command repoquery:

$ repoquery -l openvpn 

Different distros put files in different locations.

Though on my Fedora system the contents of openvpn show the following when I grep for "easy-rsa/2.0":

$ repoquery -l openvpn | grep -i "easy-rsa/2.0"
/usr/share/openvpn/easy-rsa/2.0
/usr/share/openvpn/easy-rsa/2.0/Makefile
/usr/share/openvpn/easy-rsa/2.0/README
/usr/share/openvpn/easy-rsa/2.0/build-ca
/usr/share/openvpn/easy-rsa/2.0/build-dh
/usr/share/openvpn/easy-rsa/2.0/build-inter
/usr/share/openvpn/easy-rsa/2.0/build-key
/usr/share/openvpn/easy-rsa/2.0/build-key-pass
/usr/share/openvpn/easy-rsa/2.0/build-key-pkcs12
/usr/share/openvpn/easy-rsa/2.0/build-key-server
/usr/share/openvpn/easy-rsa/2.0/build-req
/usr/share/openvpn/easy-rsa/2.0/build-req-pass
/usr/share/openvpn/easy-rsa/2.0/clean-all
/usr/share/openvpn/easy-rsa/2.0/inherit-inter
/usr/share/openvpn/easy-rsa/2.0/list-crl
/usr/share/openvpn/easy-rsa/2.0/openssl-0.9.6.cnf
/usr/share/openvpn/easy-rsa/2.0/openssl.cnf
/usr/share/openvpn/easy-rsa/2.0/pkitool
/usr/share/openvpn/easy-rsa/2.0/revoke-full
/usr/share/openvpn/easy-rsa/2.0/sign-req
/usr/share/openvpn/easy-rsa/2.0/vars
/usr/share/openvpn/easy-rsa/2.0/whichopensslcnf

So where are your files?

The next thing to consider when installing software is where are the packages coming from. Are they official? A 3rd party repository? You can check with this command:

$ repoquery -i openvpn | grep Repo
Repository  : fedora

So this is an official package on my system, and it contains the directories you're asking about.

An alternative

The Linux AMI distros that AmazonWS uses are custom versions of CentOS. It probably makes more sense to either install a fullblown version of CentOS or Ubuntu and install the packages using that distro's normal packages vs. these modified ones that Amazon appears to be offering.