Re: [Openvpn-users] PKCS11 problems with 2.5.1 under windows 10

2021-04-14 Thread Selva Nair
Hi, On Wed, Apr 14, 2021 at 8:09 PM mike tancsa wrote: > Thank you very much for the analysis and pointer. The application is a > kiosk type environment and for a number of reasons, the windows dialog > PIN popping up is not workable. Its been a while since I built OpenVPN > from source, but I

Re: [Openvpn-users] PKCS11 problems with 2.5.1 under windows 10

2021-04-14 Thread mike tancsa
Thank you very much for the analysis and pointer.  The application is a kiosk type environment and for a number of reasons, the windows dialog PIN popping up is not workable. Its been a while since I built OpenVPN from source, but I imagine I could roll a version of the OpenSSL.DLL that would max o

Re: [Openvpn-users] PKCS11 problems with 2.5.1 under windows 10

2021-04-14 Thread Selva Nair
Hi, As per the logs its requesting unpadded signature of size 256 (padding = 3) which is expected with OpenSSL 1.1.1 and TLS 1.2 or 1.3 as the it requires PSS padded signature and OpenSSL provides the padded data to sign with padding = NONE. My guess would be that your hardware token doesn't suppo

[Openvpn-users] PKCS11 problems with 2.5.1 under windows 10

2021-04-14 Thread mike tancsa
Trying out a newer version of OpenVPN community edition (latest from the website) on windows 10 and running into problems with a config that works from 2.4.7.  If I use the token with OpenVPN 2.4.7 it works as expected. On 2.5.1, I get a series of errors when using the pkcs11 method. The token wor