Hi, Il 01/04/20 18:14, Nathan Stratton Treadway ha scritto: > On Thu, Mar 26, 2020 at 17:11:27 +0200, Samuli Seppänen wrote: >> Il 26/03/20 15:47, Ralf Hildebrandt ha scritto: >>> As you might have heard this covid19 thingy is forcing (our) users to >>> work from home. >>> >>> We're using openvpn (in the meantime we deployed three openvpn servers >>> to handle the load adn have optimised the scripts to lower the overall >>> latency upon execution), and recently we encountered massive problems with >>> openvpn 2.4.8 on Windows 10. The bundled TAP32 Adapter is having >>> issues (little yellow triangle with an exclamation mark in the device >>> manager). >> >> Can you send me (privately) C:\Windows\inf\setupapi.dev.log from one or >> some of the affected computers? Or just the part of it which describes >> the failed tap-windows6 installation (rather easy to find). > > We've just hit what I assume is the same problem at our site. > Interestingly we have two "twin" Windows 10 machines (same model > purchased at the same time), but OpenVPN installed fine on one and had > the problem on the other. > > (Specifically on the failed machine the TAP-Windows Adapter V9 entry in > the Deveice manger has a Device Status of "Windows cannot verify the > digital signature for the drivers required for this device. A recent > hardware or software change might have installed a file that is signed > incorrectly or damaged, or that might be malicious software from an > unknown source. (Code 52)"..) > > On both of these machines OpenVPN had never been installed before > the recent installation. > > I should be able to get the setupapi.dev.log files from both of the > machines if that would be helpful.
I looked at Ralf's logs and they show that - for whatever reason - the tap-windows installer chose to install the Windows 7 version of tap-windows6 on those Windows 10 instances. The Digital signer in the device properties should show "Microsoft Windows Hardware Compatibility Publisher" (=attestation signature), not "OpenVPN Inc" (cross-signed). Assuming 9.23.x works it "should be easy"(tm) to figure out what the difference is. Or maybe something changed in Windows which causes this misbehavior. Fully removing all traces of tap-windows6 from the system, e.g. with Remote-Tapwindows.ps1: <https://github.com/mattock/tap-windows-scripts> Can you guys try if that full removal helps with this? Samuli _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
