Re: [Openvpn-devel] Openvpn future: probably certificate problems...

2005-01-14 Thread Leonard Isham
On Fri, 14 Jan 2005 13:28:30 +0100, Didier Conchaudron wrote: > Leonard Isham wrote: > > [snip] > > >>Btw, MSDN cryptoapi docs don't talk about a way to get userspace certs > >>from a SYSTEM rights. I think a way to solve this issue would be to make > >> openvpn deals with a userspace component

Re: [Openvpn-devel] Openvpn future: probably certificate problems...

2005-01-14 Thread Didier Conchaudron
Leonard Isham wrote: [snip] Btw, MSDN cryptoapi docs don't talk about a way to get userspace certs from a SYSTEM rights. I think a way to solve this issue would be to make openvpn deals with a userspace component which one could get the certificate and supply desired data to openvpn at tunnel

Re: [Openvpn-devel] Openvpn future: probably certificate problems...

2005-01-14 Thread Leonard Isham
[snip] > > The user should not have the ability to logon to a machine with > > OpenVPN installed if they are not allowed to use OpenVPN, or that user > > should not have access to run the GUI (maybe the OpenVPN Service > > should not even be running). > > These are not the questions. The ability t

Re: [Openvpn-devel] Openvpn future: probably certificate problems...

2005-01-14 Thread Didier Conchaudron
Leonard Isham wrote: On Thu, 13 Jan 2005 14:55:00 +0100, Didier Conchaudron wrote: Hi all, I'm still working on a renewed openvpn service wrapper( which's heading to allow a non-admin user to start/stop pre-defined tunnels via a tcp socket) and I see some big troubles in a near future. The *

Re: [Openvpn-devel] Openvpn future: probably certificate problems...

2005-01-13 Thread Leonard Isham
On Thu, 13 Jan 2005 14:55:00 +0100, Didier Conchaudron wrote: > Hi all, > > I'm still working on a renewed openvpn service wrapper( which's heading > to allow a non-admin user to start/stop pre-defined tunnels via a tcp > socket) and I see some big troubles in a near future. > > The *great* actu