Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-08 Thread Selva Nair
On Thu, Sep 8, 2016 at 5:54 AM, Jan Just Keijser wrote: > > If a fully-patched Windows XP understands SHA2 Authenticode signatures > > then it should not show "Unknown publisher" in "File properties" dialog > > for the installer, executables or libraries. The tap-windows driver is > > still signe

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-08 Thread Jan Just Keijser
Hi Samuli, On 08/09/16 10:11, Samuli Seppänen wrote: >> On Wed, Sep 7, 2016 at 8:03 PM, Samuli Seppänen > > wrote: >> >> >> The SHA1 signature is/was needed to support Windows Vista. It was >> created using a normal (non-EV) kernel-mode Authenticode certificate

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-08 Thread Samuli Seppänen
> On Wed, Sep 7, 2016 at 8:03 PM, Samuli Seppänen > wrote: > > > The SHA1 signature is/was needed to support Windows Vista. It was > created using a normal (non-EV) kernel-mode Authenticode certificate. > > > As far as I'm aware, a fully patched WinXP box fully

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-07 Thread Jason Haar
On Wed, Sep 7, 2016 at 8:03 PM, Samuli Seppänen wrote: > > The SHA1 signature is/was needed to support Windows Vista. It was > created using a normal (non-EV) kernel-mode Authenticode certificate. > As far as I'm aware, a fully patched WinXP box fully supports SHA2 - so you shouldn't have any is

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-07 Thread Jose Alf.
Hi Samuli, Thank you so much for taking the time to explain and clarify this subject. Best Regards,Jose From: Samuli Seppänen To: Jose Alf. ; "openvpn-users@lists.sourceforge.net" Sent: Wednesday, September 7, 2016 3:03 AM Subject: Re: [Openvpn-users] Windows tap driv

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-07 Thread Samuli Seppänen
Hi, Il 06/09/2016 17:22, Jose Alf. ha scritto: > > On Tue, 6 Sep 2016 09:34:33 +0200, Gert Doering wrote: > > Could you share how you do the silent install / silent update? Is this > using wpkg, or something else? > > We don't use wpkg, but we take advantage of the same technique they use > to av

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-06 Thread Jose Alf.
On Tue, 6 Sep 2016 09:34:33 +0200, Gert Doering wrote: Could you share how you do the silent install / silent update?  Is this using wpkg, or something else? We don't use wpkg, but we take advantage of the same technique they use to avoid the Security Confirmation prompt when the driver is being

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-06 Thread Jason Haar
We kept hitting the problem of the driver triggering an UAC admin popup requiring confirmation - even though it is signed. We got around it by using certutil to "pre load" the cert into the system store, then it doesn't need to do the UAC check. I don't know if this is needed any more, but it still

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-06 Thread debbie10t
The openvpn installer has two undocumented command line parameters: /S = silent /D directory = destination directory http://superuser.com/questions/998497/is-it-possible-to-install-tap-windows-virtual-openvpn-network-driver-in-silent regards On 06/09/16 08:34, Gert Doering wrote: > Hi, > >

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-06 Thread Gert Doering
Hi, On Mon, Sep 05, 2016 at 10:34:50PM +, Jose Alf. wrote: > This prevents us from running a silent update of OpenVPN. Any plans to > release a new version with an updated certificate? Could you share how you do the silent install / silent update? Is this using wpkg, or something else? (Th

Re: [Openvpn-users] Windows tap driver signing certificate expired.

2016-09-05 Thread Jose Alf.
Please disregard, I just noticed that the tap-windows-9.21.2.exe available from the download page has a newer certificate that expires in 2024.Since I'm repacking the OpenVPN installation I will include this one. Thanks for all the hard work. RegardsJose From: Jose Alf. To: "openvpn-us

[Openvpn-users] Windows tap driver signing certificate expired.

2016-09-05 Thread Jose Alf.
This is probably know by now, but I want to report that the certificate used to sign the tap-windows cabinet file expired on Sept 3, 2016. This prevents us from running a silent update of OpenVPN. Any plans to release a new version with an updated certificate? Thanks in advance for your suppor