Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-20 Thread Didier Conchaudron
I've exactly the same problem. Running on win2k. Didier Mathias Sundman wrote: Peter 'Luna' Runestig has put together a Crypto API patch which tries to access user-based certificate/key pairs even when OpenVPN is running as a service. Given that Peter can't test this patch himself, it would

[Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-20 Thread Mathias Sundman
Peter 'Luna' Runestig has put together a Crypto API patch which tries to access user-based certificate/key pairs even when OpenVPN is running as a service. Given that Peter can't test this patch himself, it would be great if someone who uses this feature would volunteer to do some testing and

Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-17 Thread James Yonan
Peter 'Luna' Runestig has put together a Crypto API patch which tries to access user-based certificate/key pairs even when OpenVPN is running as a service. Given that Peter can't test this patch himself, it would be great if someone who uses this feature would volunteer to do some testing and re

Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-16 Thread Peter 'Luna' Runestig
On 2005-01-16 03:12, James Yonan wrote: > Looks like CERT_SYSTEM_STORE_USERS is undefined in the MinGW environment. > > gcc -g -O2 -Wall -Wno-unused-function -Wno-unused-variable -mno-cygwin > -I/c/src/ > openssl-0.9.7e/include -I/c/src/lzo-1.08/include -c cryptoapi.c -o cryptoapi.o > cryptoapi.c

Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-15 Thread James Yonan
Looks like CERT_SYSTEM_STORE_USERS is undefined in the MinGW environment. gcc -g -O2 -Wall -Wno-unused-function -Wno-unused-variable -mno-cygwin -I/c/src/ openssl-0.9.7e/include -I/c/src/lzo-1.08/include -c cryptoapi.c -o cryptoapi.o cryptoapi.c: In function `SSL_CTX_use_CryptoAPI_certificate': cr

[Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-15 Thread Peter 'Luna' Runestig
On 2005-01-15 04:03, James Yonan wrote: [snip] > (1b) The SYSTEM account (sort of like "Windows" root, the user under > which services/daemons run) can't read a specific user's key from the > Crypto API store. I believe that this should be possible. I don't have the time and means to try out stu

Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-15 Thread Julien TOUCHE
Leonard Isham a écrit : What about a dual account/ID user situation? Where one user is a normal user with all the restrictions and the other has administrator rights. The first is used to login the second, administrator equivalent is for storing the certificate and running the service. go

Re: [Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-15 Thread Leonard Isham
On Fri, 14 Jan 2005 20:03:57 -0700 (MST), James Yonan wrote: > On Thu, 13 Jan 2005, Didier Conchaudron wrote: > > > Hi all, > > > > I'm still working on a renewed openvpn service wrapper( which's heading > > to allow a non-admin user to start/stop pre-defined tunnels via a tcp > > socket) and I s

[Openvpn-devel] Re: Openvpn future: probably certificate problems...

2005-01-14 Thread James Yonan
On Thu, 13 Jan 2005, Didier Conchaudron wrote: > Hi all, > > I'm still working on a renewed openvpn service wrapper( which's heading > to allow a non-admin user to start/stop pre-defined tunnels via a tcp > socket) and I see some big troubles in a near future. > > The *great* actual cryptoapi