I've exactly the same problem.
Running on win2k.
Didier
Mathias Sundman wrote:
Peter 'Luna' Runestig has put together a Crypto API patch which tries
to access user-based certificate/key pairs even when OpenVPN is
running as a service.
Given that Peter can't test this patch himself, it would
Peter 'Luna' Runestig has put together a Crypto API patch which tries to
access user-based certificate/key pairs even when OpenVPN is running as
a service.
Given that Peter can't test this patch himself, it would be great if
someone who uses this feature would volunteer to do some testing and
Peter 'Luna' Runestig has put together a Crypto API patch which tries to
access user-based certificate/key pairs even when OpenVPN is running as a
service.
Given that Peter can't test this patch himself, it would be great if
someone who uses this feature would volunteer to do some testing and
re
On 2005-01-16 03:12, James Yonan wrote:
> Looks like CERT_SYSTEM_STORE_USERS is undefined in the MinGW environment.
>
> gcc -g -O2 -Wall -Wno-unused-function -Wno-unused-variable -mno-cygwin
> -I/c/src/
> openssl-0.9.7e/include -I/c/src/lzo-1.08/include -c cryptoapi.c -o cryptoapi.o
> cryptoapi.c
Looks like CERT_SYSTEM_STORE_USERS is undefined in the MinGW environment.
gcc -g -O2 -Wall -Wno-unused-function -Wno-unused-variable -mno-cygwin -I/c/src/
openssl-0.9.7e/include -I/c/src/lzo-1.08/include -c cryptoapi.c -o cryptoapi.o
cryptoapi.c: In function `SSL_CTX_use_CryptoAPI_certificate':
cr
On 2005-01-15 04:03, James Yonan wrote:
[snip]
> (1b) The SYSTEM account (sort of like "Windows" root, the user under
> which services/daemons run) can't read a specific user's key from the
> Crypto API store.
I believe that this should be possible. I don't have the time and means
to try out stu
Leonard Isham a écrit :
What about a dual account/ID user situation? Where one user is a
normal user with all the restrictions and the other has administrator
rights. The first is used to login the second, administrator
equivalent is for storing the certificate and running the service.
go
On Fri, 14 Jan 2005 20:03:57 -0700 (MST), James Yonan wrote:
> On Thu, 13 Jan 2005, Didier Conchaudron wrote:
>
> > Hi all,
> >
> > I'm still working on a renewed openvpn service wrapper( which's heading
> > to allow a non-admin user to start/stop pre-defined tunnels via a tcp
> > socket) and I s
On Thu, 13 Jan 2005, Didier Conchaudron wrote:
> Hi all,
>
> I'm still working on a renewed openvpn service wrapper( which's heading
> to allow a non-admin user to start/stop pre-defined tunnels via a tcp
> socket) and I see some big troubles in a near future.
>
> The *great* actual cryptoapi