On Tue, 6 Sep 2016 09:34:33 +0200, Gert Doering wrote:
Could you share how you do the silent install / silent update?  Is this
using wpkg, or something else?

We don't use wpkg, but we take advantage of the same technique they use to 
avoid the Security Confirmation prompt when the driver is being installed. This 
is the same solution reported by Jason Haar in this thread. 

However, right now, the story is a bit more complicated. I notice that the 
cabinet file have two signatures, one is the old SHA1 signature that expired on 
Sept 2nd, 2016 and there is a new SHA2 certificate that will expire Feb 13, 
2019. In my test, I found I had to preload BOTH certificates to get rid of the 
prompt... I only tested on Windows 7 and I also had to install 2 patches 
(KB2921916 and kb3033929). This is related to the planned deprecation of SHA1. 
See 
http://www.migee.com/2010/09/24/solution-for-unattendedsilent-installs-and-would-you-like-to-install-this-device-software/
I also checked the tap-windows included in the OpenVPN-NL distribution and it 
also has two signatures by Fox It (one SHA1 with an expired certificate and the 
other SHA2 with a current one). Anyway, I will repeat the test on another 
machine to make sure the behavoir is consistent.

Regards,Jose
------------------------------------------------------------------------------
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to