connect and add username and password to openvpn-gui.exe cfg using batch script or cmd

WoLvES

I've got ovpn configs, When I login for 1st time to any cfgs it asks for password, but I've over 10000 cfgs, so is it possible to use batch script in windows to auto login, it says

--auth-user-pass

invalid

"C:\Program Files\OpenVPN\bin\openvpn-gui.exe" --connect test.ovpn

and after how do i include username and password in this cmd line. so I can make bunch of batch script to connect without adding username and password manually in all cfgs, and run all silently

openvpn_inc

Hello WoLvES,

If you use OpenVPN Access Server and you need to connect devices unattended, then you can use the auto-login type profiles. Those do not require username and password to connect because they authenticate using the built-in certificate in the connection profile.

And on OpenVPN Cloud you can do the same by turning off Connect Auth in the settings. That setting governs whether OpenVPN Cloud will require credentials on top of the built-in certificates in the connection profiles or not.

If you're not using those products, another option could be to automate entering username/password on the command line. There's some options for this. You can run the openvpn.exe process itself that does the actual VPN tunnel (bypass openvpn-gui.exe entirely) and then you have a couple of options. You can use the management interface to connect to the openvpn.exe process and control it with commands sent through that interface, and provide credentials through that interface. Or do some hackish things that runs the openvpn.exe process interactively and you pipe something to stdin to enter username/password at the correct time. Or you can use the auth-user-pass directive in the OpenVPN connection profile and pass a plain-text file to it that contains the username and password on separate lines. That last option is a little scary because that file contains your credentials and it's not encrypted. Example:

auth-user-pass myauthfile.txt

Contents of myauthfile.txt:
myusername
mypassword

I hope that information helps. Good luck.

Kind regards,
Johan

WoLvES

"C:\Program Files\OpenVPN\bin\openvpn-gui.exe"  --connect test.tcp.ovpn --auth-user-pass "C:\temp\myauthfile.txt"

idk the command line, I tried this
myauthfile.txt is in

"C:\temp\myauthfile.txt"

and inside it i put username and password like you said, then when i run that is gives this error

WoLvES

or what is the command line for openvpn.exe for windows?? command line with username and password

WoLvES

C:\Users\nafim\OpenVPN>"C:\Program Files\OpenVPN\bin\openvpn.exe" --config C:\Users\nafim\OpenVPN\config\al18.nordvpn.com.udp1194.ovpn --auth-user-pass "C:\temp\myauthfile.txt"
2021-07-06 16:41:08 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-07-06 16:41:08 OpenVPN 2.5.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 17 2021
2021-07-06 16:41:08 Windows version 10.0 (Windows 10 or greater) 64bit
2021-07-06 16:41:08 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10
2021-07-06 16:41:08 WARNING: --ping should normally be used with --ping-restart or --ping-exit
2021-07-06 16:41:08 NOTE: --fast-io is disabled since we are running on Windows
2021-07-06 16:41:08 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2021-07-06 16:41:08 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2021-07-06 16:41:08 TCP/UDP: Preserving recently used remote address: [AF_INET]31.171.152.19:1194
2021-07-06 16:41:08 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-07-06 16:41:08 UDP link local: (not bound)
2021-07-06 16:41:08 UDP link remote: [AF_INET]31.171.152.19:1194
2021-07-06 16:41:08 TLS: Initial packet from [AF_INET]31.171.152.19:1194, sid=faf1e1bc 2c769a8c
2021-07-06 16:41:09 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
2021-07-06 16:41:09 VERIFY OK: depth=1, C=PA, O=NordVPN, CN=NordVPN CA6
2021-07-06 16:41:09 VERIFY KU OK
2021-07-06 16:41:09 Validating certificate extended key usage
2021-07-06 16:41:09 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-07-06 16:41:09 VERIFY EKU OK
2021-07-06 16:41:09 VERIFY OK: depth=0, CN=al18.nordvpn.com
2021-07-06 16:41:09 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512
2021-07-06 16:41:09 [al18.nordvpn.com] Peer Connection Initiated with [AF_INET]31.171.152.19:1194
2021-07-06 16:41:10 SENT CONTROL [al18.nordvpn.com]: 'PUSH_REQUEST' (status=1)
2021-07-06 16:41:11 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.2.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.2.21 255.255.255.0,peer-id 6,cipher AES-256-GCM'
2021-07-06 16:41:11 OPTIONS IMPORT: timers and/or timeouts modified
2021-07-06 16:41:11 OPTIONS IMPORT: explicit notify parm(s) modified
2021-07-06 16:41:11 OPTIONS IMPORT: compression parms modified
2021-07-06 16:41:11 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
2021-07-06 16:41:11 Socket Buffers: R=[65536->524288] S=[65536->524288]
2021-07-06 16:41:11 OPTIONS IMPORT: --ifconfig/up options modified
2021-07-06 16:41:11 OPTIONS IMPORT: route options modified
2021-07-06 16:41:11 OPTIONS IMPORT: route-related options modified
2021-07-06 16:41:11 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2021-07-06 16:41:11 OPTIONS IMPORT: peer-id set
2021-07-06 16:41:11 OPTIONS IMPORT: adjusting link_mtu to 1657
2021-07-06 16:41:11 OPTIONS IMPORT: data channel crypto options modified
2021-07-06 16:41:11 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-07-06 16:41:11 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-07-06 16:41:11 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-07-06 16:41:11 interactive service msg_channel=0
2021-07-06 16:41:11 ROUTE_GATEWAY 192.168.31.1/255.255.255.0 I=20 HWADDR=2c:f0:5d:72:f2:94
2021-07-06 16:41:11 open_tun
2021-07-06 16:41:11 tap-windows6 device [OpenVPN TAP-Windows6] opened
2021-07-06 16:41:11 TAP-Windows Driver Version 9.24
2021-07-06 16:41:11 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.2.0/10.8.2.21/255.255.255.0 [SUCCEEDED]
2021-07-06 16:41:11 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.2.21/255.255.255.0 on interface {DFBB33E8-8078-4E5F-9F1D-A2188EC5CD6E} [DHCP-serv: 10.8.2.254, lease-time: 31536000]
2021-07-06 16:41:11 NOTE: FlushIpNetTable failed on interface [19] {DFBB33E8-8078-4E5F-9F1D-A2188EC5CD6E} (status=5) : Access is denied.
2021-07-06 16:41:11 TUN: Setting IPv4 mtu failed: Access is denied. [status=5 if_index=19]
2021-07-06 16:41:16 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
2021-07-06 16:41:16 C:\WINDOWS\system32\route.exe ADD 31.171.152.19 MASK 255.255.255.255 192.168.31.1
2021-07-06 16:41:16 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=20]
2021-07-06 16:41:16 Route addition via IPAPI failed [adaptive]
2021-07-06 16:41:16 Route addition fallback to route.exe
2021-07-06 16:41:16 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
2021-07-06 16:41:16 ERROR: Windows route add command failed [adaptive]: returned error code 1
2021-07-06 16:41:16 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.2.1
2021-07-06 16:41:16 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=19]
2021-07-06 16:41:16 Route addition via IPAPI failed [adaptive]
2021-07-06 16:41:16 Route addition fallback to route.exe
2021-07-06 16:41:16 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
2021-07-06 16:41:16 ERROR: Windows route add command failed [adaptive]: returned error code 1
2021-07-06 16:41:16 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.2.1
2021-07-06 16:41:16 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=19]
2021-07-06 16:41:16 Route addition via IPAPI failed [adaptive]
2021-07-06 16:41:16 Route addition fallback to route.exe
2021-07-06 16:41:16 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
2021-07-06 16:41:16 ERROR: Windows route add command failed [adaptive]: returned error code 1
2021-07-06 16:41:16 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-07-06 16:41:16 Initialization Sequence Completed

WoLvES

WoLvES wrote

"C:\Program Files\OpenVPN\bin\openvpn-gui.exe"  --connect test.tcp.ovpn --auth-user-pass "C:\temp\myauthfile.txt"

idk the command line, I tried this
myauthfile.txt is in

"C:\temp\myauthfile.txt"

and inside it i put username and password like you said, then when i run that is gives this error

nvme help me with this thing only

openvpn_inc

Hello WoLvES,

The example gives goes into the .ovpn file itself, not passed on the command line. Although in theory it can be, but then you have to use the OpenVPN process, not the OpenVPN GUI process.

Kind regards,
Johan

TinCanTech

openvpn_inc wrote The example gives goes into the .ovpn file itself, not passed on the command line

You must add this to the .ovpn configuration file:

auth-user-pass "C:\\temp\\myauthfile.txt"

Note: Windows backslash must be escaped: \\