On Wed, Apr 15, 2020 at 13:38:37 +0300, Samuli Seppänen wrote:
> Here's the summary of the IRC meeting.
> ---
> Place: #openvpn-meeting on irc.freenode.net
> Date: Wed 15th April 2020
> Time: 11:30 CEST (09:30 UTC)
> Mattock will check if it would be possible to give unique identifiers to
> Windows 7 and Windows 10 flavors of tap-windows6. This would prevent
> situations where an existing, cached Windows 7 driver is preferred over
> a Windows 10 (attestation signed) version, hence causing driver
> installation failures.
> Mattock will also check if we could, with a reasonable effort, provide
> users with an easy way to clean up old tap-windows6 drivers in the NSIS
> installer. The process is already known and can be done with external
> scripts, but integration / reimplementation in NSIS is missing.

Just wanted to be sure that the separate-but-related step of having the
Windows installer verify the Windows version at install time is also on
the list for investigation.  

In our particular case, at least, if the Win7 installer had refused to
proceed when executed under Win10, the situation with TAP driver
mismatch would have been avoided completely.  If it's possible to do,
that seems a preferable outcome, even if the steps mentioned above also
make it much easier to recover from the mismatch situation after the

(Of course, even better from a user standpoint would be a single unified
OpenVPN Windows installer which automatically installs the
correctly-signed drivers for the current system -- but I assume that
approach has already been investigated/considered earlier in the
development of the Windows installer....)



Nathan Stratton Treadway  -  natha...@ontko.com  -  Mid-Atlantic region
Ray Ontko & Co.  -  Software consulting services  -   http://www.ontko.com/
 GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt   ID: 1023D/ECFB6239
 Key fingerprint = 6AD8 485E 20B9 5C71 231C  0C32 15F3 ADCD ECFB 6239

Openvpn-devel mailing list

Reply via email to