[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Openvpn-users] OpenVPN with Microsoft Certificate Store


  • Subject: [Openvpn-users] OpenVPN with Microsoft Certificate Store
  • From: ANTONIS PROIMADIS <aproim@xxxxxxxxx>
  • Date: Wed, 12 Jan 2005 15:47:29 +0200

Hello, 

i am using openVPN with certificates. The client is windowsXP and the
server is a linux fedora 3.

Until today i had the certificates in the ovpn file like this: 
ca tmp-ca.crt 
cert client.crt 
key client.key 

I decided to import the certificate in microsoft certificate store and
use it from there. (The certificate isn't exportable so this is a
safer solution)
After i imported the certificate i change the ovpn file like this: 
ca tmp-ca.crt 
cryptoapicert "THUMB:00 70 07 8e....." 

If i try to connect using the gui (right click ->connect) everything
works fine.
If i try to connect from the services mmc (right click in "OpenVPN
Service" and start" then in the log i get the error:

Wed Jan 12 13:25:05 2005 us=192554 OpenVPN 2.0_rc6 Win32-MinGW [SSL]
[LZO] built on Dec 20 2004
Wed Jan 12 13:25:05 2005 us=192816 IMPORTANT: OpenVPN's default port
number is now 1194, based on an official port number assignment by
IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Jan 12 13:25:05 2005 us=192866 WARNING: No server certificate
verification method has been enabled. See
http://openvpn.sourceforge.net/howto.html#mitm for more info.
Wed Jan 12 13:25:05 2005 us=220202 Cannot load certificate "THUMB:00
70 07 8e a7 30 cf 16 98 0f 70 af 01 39 db 77 90 7e 9b 1a" from
Microsoft Certificate Store: error:C5065064:microsoft
cryptoapi:CertFindCertificateInStore:Cannot find object or property.
Wed Jan 12 13:25:05 2005 us=220362 Exiting 

Anyone has an idea what is this error? 

Regards 

Antonis


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users