Hello,

On Thu, Mar 9, 2023 at 4:01 AM openvpn <open...@sup-logistik.de> wrote:

> Hi,  I’m posting the follow question here as I was redirect to this
> mailing list for support by OpenVPN forum.
>
>
>
>
> https://forums.openvpn.net/viewtopic.php?p=110748&hilit=error+0A00007B#p110748
>

Thanks for your report. I think we introduced a bug while changing the
pkcs11-helper interface to support RSA-PSS signatures. We now directly
call pkcs11h_certificate_signAnyEx()  but failed to convert the ECDSA
signature to the form OpenSSL expects -- PKCS#11 returns r|s, OpenSSl wants
DER encoded asn.1.

If you want to try out a fixed version, use openvpn.exe from the GHA build
here:
https://github.com/selvanair/openvpn/suites/11479839963/artifacts/592797275
Just replacing the one installed in C:\Program Files\OpenVPN\bin with this
should do.

Selva
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to