Why do I have to put my password two times?

German

I edited the ovpn-file so openvpn makes an autologin. I created a line like "auth-user-pass password.txt" in the ovpn file and of course created a password.txt file in the same directory. Everything works fine so far. But in the end of the authentification routine it asks only the password again.

Before that I had to type in username and password and after that the password as a single field again. Now I only have to type the password, that one in the single field which you can see in the snapshot. I mean that is an improvement 1xusername and 2xpassword is now 1xpassword...

But why do I have to type in the single password anyway? I mean I created the autologon stuff NOT to type in anything anymore.

See the snapshot please:

maikcat

post your config please.

Michael.

German

client

ca ca.crt
cert xxxxx.yyyyy.crt
key xxxxx.yyyyy.key

remote DE.openvpn.cyberghostvpn.com 9081

auth-user-pass password.txt
dev tun
proto udp
dhcp-renew
dhcp-release
resolv-retry infinite
persist-key
persist-tun
ping-restart 0
nobind
ping-timer-rem
cipher AES-256-CBC
comp-lzo yes
verb 4
remote-cert-tls server
route-delay 5
tun-mtu 1500
fragment 1300
auth MD5
mssfix

maikcat

key xxxxx.yyyyy.key

is your key password protected as well?

please also post client logs.

Michael.

German

I think you are right. I typed in the wrong password on purpose to see what happens in the logfile:

Tue Oct 08 09:11:12 2013 MANAGEMENT: CMD 'password [...]'
Tue Oct 08 09:11:12 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 08 09:11:12 2013 SIGUSR1[soft,private-key-password-failure] received, process restarting
Tue Oct 08 09:11:12 2013 MANAGEMENT: >STATE:xxx1216xxx,RECONNECTING,private-key-password-failure,,
Tue Oct 08 09:11:12 2013 Restart pause, 2 second(s)

But what can I do to autologon the private-key ?

maikcat

why dont you remove it?

openssl rsa -in privateKey.pem -out newPrivateKey.pem

Michael.

German

Ok I see, I tried it, but it was not easy to understand.

I had to find the openssl.exe in the directory:

C:\Program Files (x86)\Steganos Online Shield\openvpn64

the .pem ending doesn't make sense for me. I just typed in for example mykey.key instead of mykey.pem ... after that indeed I was able to delete the password out of the .key file. In the dos window it prompted me for the password.

maikcat

if your problem was solved please let me know to close the lopic...

Michael.

German

It works just like I described above .key instead .pem