Hello,
I've got a simple question of which I can't find the answer;
When a user chooses to save the encrypted private key password - where and how does OpenVPN Connect 3.2.2 for Windows store this ?
Thanks,
Klaas
OpenVPN Connect 3.2.2 private key password location
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Jul 05, 2021 10:26 am
- openvpn_inc
- OpenVPN Inc.
- Posts: 1333
- Joined: Tue Feb 16, 2021 10:41 am
Re: OpenVPN Connect 3.2.2 private key password location
Hello Klaas,
When you import an encrypted private key into the OpenVPN Connect client program it will ask you for the password to decrypt it. It will then decrypt it, and send the unencrypted private key to the Windows user certificate store. However, Windows applies its own encryption of private keys here. Where it is kept is encrypted with a key tied to your Windows account which is in turn encrypted with your Windows login password.
With OpenVPN Connect there is at this time no way to store the private key in the Windows certificate store in such a way that a password is required each time to unlock it. But it's also not stored unencrypted - it's just encrypted in a different manner controlled by Windows.
Kind regards,
Johan
When you import an encrypted private key into the OpenVPN Connect client program it will ask you for the password to decrypt it. It will then decrypt it, and send the unencrypted private key to the Windows user certificate store. However, Windows applies its own encryption of private keys here. Where it is kept is encrypted with a key tied to your Windows account which is in turn encrypted with your Windows login password.
With OpenVPN Connect there is at this time no way to store the private key in the Windows certificate store in such a way that a password is required each time to unlock it. But it's also not stored unencrypted - it's just encrypted in a different manner controlled by Windows.
Kind regards,
Johan
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support