[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Windows PKCS#11-Problem


  • Subject: Re: [Openvpn-users] Windows PKCS#11-Problem
  • From: "Alon Bar-Lev" <alon.barlev@xxxxxxxxx>
  • Date: Wed, 6 Dec 2006 19:47:07 +0200

On 12/6/06, Robert Fischer <triton@xxxxxxxxxxxx> wrote:
> After that step the eToken worked like a charm, and is fully interoperable
> among Windows and Linux.

I am glad!
Although I would have been much happier if you told me that OpenSC
PKCS#11 provider works on Windows too... :)
I don't like to use closed source drivers...

> So my last wish is to instruct OpenVPN to not ask for a pin, since i would
> like to use the OpenVPN-GUI, which (at the moment) isn't able to request one
> via a GUI dialog. Maybe this is possible by simply not supplying a user pin
> on token initialization, but i've to try that.

I will not support that.
Smartcards are used because the provide more security.
Using hardcoded PIN is violates this.

The OpenVPN GUI is a known issue... I am not a GUI type of man... It
should be so simple to support the management interface!!!
On Linux you can use the kovpn, which works find.
I think that it should take about one week for someone to write a .NET
GUI for Windows.

For the mean time I can suggest to use CryptoAPI interface for
Windows, this is why Tony also uses none PKCS#11 configuration.

Best Regards,
Alon Bar-Lev.
______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Warning: require_once(../../../archive_common.php) [function.require-once]: failed to open stream: No such file or directory in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2006-12/msg00061.html on line 205

Fatal error: require_once() [function.require]: Failed opening required '../../../archive_common.php' (include_path='/usr/local/lib/php') in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2006-12/msg00061.html on line 205