Re: [Openvpn-devel] OpenVPN 2.4.8 released

2019-11-11 Thread d tbsky
Simon Rozman 
> The TAP-Windows6 driver remains loaded when there are TAP adapters present.
> Even if adapters are in the "disconnected" state. This makes upgrading the
> driver a real challenge. I would suggest disabling all TAP adapters before
> attempting the upgrade. Disabling the last of the TAP adapters will cause
> Windows kernel to unload the TAP-Windows6, allowing its upgrade.

 try to disable TAP Adapter and upgrade. there is no more error
during installation. but when I try to connect it shows the tap device
is in use. reboot is useless.
if I uninstall tap-windows 9.21 first and then upgrade, everything
works fine even without reboot.

we don't have KB2921916 installed and we use correct win7 installer.

Regards,
tbskyd


___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] OpenVPN 2.4.8 released

2019-11-10 Thread d tbsky
Samuli Seppänen :
> The error is pretty clear:
>
> Error 0x800b0109: A certificate chain processed, but terminated in a
> root certificate which is not trusted by the trust provider.
>
> Is your computer perhaps behind in Windows updates? My hunch is that
> Digicert's latest root certificate is not availabe in the Windows
> certificate store and this causes the failure.
>
> Samuli

   thanks for the hint! but I don't know why uninstall/reinstall make
things work?

  our windows 7 update is stay at 2019-8, which is not very far
behind. but we do security-only update to prevent telemetry, I don't
know if that make difference.
  I will try again when windows update mess quiet down. December patch
is always good these years. hope it is the same this year.

Regards,
tbskyd


___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel


Re: [Openvpn-devel] OpenVPN 2.4.8 released

2019-11-06 Thread d tbsky

> It would be interesting too what error message there is in setupapi.dev.log:
>

I found a win7 vm with openvpn 2.4.6. try to upgrade to 2.4.8 and get
the same result.
setupapi.dev.log attached. there are some international characters but
I think they are not important.
I snapshot the vm before upgrade. so I can repeat the procedure if necessary.

Regards,
tbskyd
[Boot Session: 2019/11/07 11:24:16.500]

>>>  [Device Install (UpdateDriverForPlugAndPlayDevices) - tap0901]
>>>  Section start 2019/11/07 11:26:35.994
  cmd: "C:\Program Files\TAP-Windows\bin\tapinstall.exe" update "C:\Program 
Files\TAP-Windows\driver\OemVista.inf" tap0901
 dvi: Set selected driver complete.
 dvi: {Build Driver List} 11:26:36.119
 dvi:  Searching for hardware ID(s):
 dvi:   tap0901
 cpy:  Policy is set to make all digital signatures equal.
 dvi:  Processing a single INF: 'c:\program 
files\tap-windows\driver\oemvista.inf'
 inf:  Opened INF: 'c:\program files\tap-windows\driver\oemvista.inf' 
([strings])
 sig:  {_VERIFY_FILE_SIGNATURE} 11:26:36.135
 sig:   Key  = oemvista.inf
 sig:   FilePath = c:\program files\tap-windows\driver\oemvista.inf
 sig:   Catalog  = c:\program files\tap-windows\driver\tap0901.cat
!sig:   Verifying file against specific (valid) catalog failed! 
(0x800b0109)
!sig:   Error 0x800b0109: A certificate chain processed, but 
terminated in a root certificate which is not trusted by the trust provider.
 sig:  {_VERIFY_FILE_SIGNATURE exit(0x800b0109)} 11:26:36.369
 sig:  {_VERIFY_FILE_SIGNATURE} 11:26:36.369
 sig:   Key  = oemvista.inf
 sig:   FilePath = c:\program files\tap-windows\driver\oemvista.inf
 sig:   Catalog  = c:\program files\tap-windows\driver\tap0901.cat
 sig:   Success: File is signed in Authenticode(tm) catalog.
 sig:   Error 0xe242: The publisher of an Authenticode(tm) 
signed catalog has not yet been established as trusted.
 sig:  {_VERIFY_FILE_SIGNATURE exit(0xe242)} 11:26:36.447
 dvi:  Created Driver Node:
 dvi:   HardwareID   - tap0901
 dvi:   InfName  - c:\program 
files\tap-windows\driver\oemvista.inf
 dvi:   DevDesc  - TAP-Windows Adapter V9
 dvi:   DrvDesc  - TAP-Windows Adapter V9
 dvi:   Provider - TAP-Windows Provider V9
 dvi:   Mfg  - TAP-Windows Provider V9
 dvi:   ModelsSec- tap0901.NTamd64
 dvi:   InstallSec   - tap0901.ndi
 dvi:   ActualSec- tap0901.ndi
 dvi:   Rank - 0x00ff
 dvi:   Signer   - OpenVPN Inc.
 dvi:   Signer Score - Authenticode
 dvi:   DrvDate  - 09/27/2019
 dvi:   Version  - 9.24.2.601
 dvi: {Build Driver List - exit(0x)} 11:26:36.447
 dvi: {DIF_SELECTBESTCOMPATDRV} 11:26:36.447
 dvi:  Using exported function 'NetClassInstaller' in module 
'C:\Windows\system32\NetCfgx.dll'.
 dvi:  Class installer == NetCfgx.dll,NetClassInstaller
 dvi:  Using exported function 'NciDeviceInstall' in module 
'C:\Windows\system32\nci.dll'.
 dvi:  CoInstaller 1 == nci.dll,NciDeviceInstall
 dvi:  Using exported function 'WlanDeviceClassCoInstaller' in module 
'C:\Windows\system32\wlaninst.dll'.
 dvi:  CoInstaller 2 == wlaninst.dll,WlanDeviceClassCoInstaller
 dvi:  Using exported function 'WwanDeviceClassCoInstaller' in module 
'C:\Windows\system32\wwaninst.dll'.
 dvi:  CoInstaller 3 == wwaninst.dll,WwanDeviceClassCoInstaller
 dvi:  CoInstaller 1: Enter 11:26:36.494
 dvi:  CoInstaller 1: Exit
 dvi:  CoInstaller 2: Enter 11:26:36.494
 dvi:  CoInstaller 2: Exit
 dvi:  CoInstaller 3: Enter 11:26:36.494
 dvi:  CoInstaller 3: Exit
 dvi:  Class installer: Enter 11:26:36.494
 dvi:  Class installer: Exit
 dvi:  Default installer: Enter 11:26:36.494
 dvi:   {Select Best Driver}
 dvi:Selected driver installs from section [tap0901.ndi] in 
'c:\program files\tap-windows\driver\oemvista.inf'.
 dvi:Class GUID of device remains: 
{4d36e972-e325-11ce-bfc1-08002be10318}.
 dvi:Set selected driver complete.
 dvi:Selected:
 dvi: Description - [TAP-Windows Adapter V9]
 dvi: InfFile - [c:\program 
files\tap-windows\driver\oemvista.inf]
 dvi: Section - [tap0901.ndi]
 dvi: Signer  - [OpenVPN Inc.]
 dvi: Rank- [0x00ff]
 dvi:   {Select Best Driver - exit(0x)}
 dvi:  Default installer: Exit
 dvi: {DIF_SELECTBESTCOMPATDRV - exit(0x)} 11:26:36.510

Re: [Openvpn-devel] OpenVPN 2.4.8 released

2019-11-05 Thread d tbsky
after reading the thread, I think now it's safe to upgrae my windows 7
 from openvpn 2.4.7 to 2.4.8. so I download the installer and click
it.

the installer complains about can not install tap drivers and I click
ok to let it go. when I try to connect,  openvpn said the tap driver
is in use and failed.
I reboot and reinstall but still can not see tap device in my network.

finally I uninstall  tap and openvpn then install again, this time
everything is ok, I am lucky.
so openvpn-gui 2.4.8 upgrade is not as smooth as previous versions.

Regards,
tbskyd


___
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel