Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

[debbie10t <deb...@gm...>]

On 02/04/17 00:57, debbie10t wrote:
> Hi,
>
> sorry, I know this is slightly off-topic ..
> I understand this may be down to a gentoo maintainer
> but as I don't know I decided to document the problem.
>
> Thanks for your help
>
>
>
>
> The problem:
>
> On gentoo when building openvpn there is a difference depending on how
> openvpn is built:
>
> The first method generates openvpn which cannot use EC PKI
> The second method generates openvpn which can use EC PKI
>

Turns out to be:
freenode#gentoo <stqn> you need to disable the bindist use flag 
(preferably globally) to get EC support

then re-build openssl then openvpn

Problem solved.