Il 18/06/2018 23:59, Gert Doering ha scritto:
> Hi,
> 
> silly me
> 
> On Mon, Jun 18, 2018 at 10:56:10PM +0200, Gert Doering wrote:
>> On Mon, Jun 18, 2018 at 08:27:31PM +0000, Jon Kunkee wrote:
> [..]
>>> Is there a chance the ARM64 changes (NDIS 6.30+build+installer) will
>>> make it in? (Are we trying to get the MSI changes in for this release?)
> 
> Didn't have time to look at the MSI stuff yet, and haven't heard from
> others.
> 
> Most likely this release will be "get things out with compromises" - 
> that is, have one attestation signed driver for Win10+Server 2016> and one 
> driver for "Win7 + 8 + 8.1", and two .exe installers.  Win10
> is still waiting for bugfixed + signed tap drivers for the fix in
> commit 7d6a1335bfe7a...

Minor correction. We will have a separate installer for Windows Server
2016, which refuses to load any drivers whose attestation signing
submission did not include HLK test results.

Windows 10 should accept drivers with an attestation signature that does
not include HLK test results. Also, if the driver includes a
cross-signed signature when it is submitted, the attestation signature
should get added to the driver. So we'd end up with a dual-signed driver
that _should_ work on Windows 7, 8, 8.1, 10 plus Windows Server 2008r2
and 2012r2.

This is at least what MS documentation says.

> 
> Then, focus on make nicer installers - .msi for the tap driver, .msi
> for openvpn proper, return to *one* driver that has proper signatures
> for everything.
> 
> gert
> 


-- 
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to