Why do I have to put my password two times?

[German]

I edited the ovpn-file so openvpn makes an autologin. I created a line like "auth-user-pass password.txt" in the ovpn file and of course created a password.txt file in the same directory. Everything works fine so far. But in the end of the authentification routine it asks only the password again.

Before that I had to type in username and password and after that the password as a single field again. Now I only have to type the password, that one in the single field which you can see in the snapshot. I mean that is an improvement 1xusername and 2xpassword is now 1xpassword...

But why do I have to type in the single password anyway? I mean I created the autologon stuff NOT to type in anything anymore.

See the snapshot please:

[maikcat]

post your config please.

Michael.

[German]

client

ca ca.crt
cert xxxxx.yyyyy.crt
key xxxxx.yyyyy.key

remote DE.openvpn.cyberghostvpn.com 9081

auth-user-pass password.txt
dev tun
proto udp
dhcp-renew
dhcp-release
resolv-retry infinite
persist-key
persist-tun
ping-restart 0
nobind
ping-timer-rem
cipher AES-256-CBC
comp-lzo yes
verb 4
remote-cert-tls server
route-delay 5
tun-mtu 1500
fragment 1300
auth MD5
mssfix

[maikcat]

key xxxxx.yyyyy.key

is your key password protected as well?

please also post client logs.

Michael.

[German]

I think you are right. I typed in the wrong password on purpose to see what happens in the logfile:

Tue Oct 08 09:11:12 2013 MANAGEMENT: CMD 'password [...]'
Tue Oct 08 09:11:12 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 08 09:11:12 2013 SIGUSR1[soft,private-key-password-failure] received, process restarting
Tue Oct 08 09:11:12 2013 MANAGEMENT: >STATE:xxx1216xxx,RECONNECTING,private-key-password-failure,,
Tue Oct 08 09:11:12 2013 Restart pause, 2 second(s)

But what can I do to autologon the private-key ?

[maikcat]

why dont you remove it?

Code: Select all

openssl rsa -in privateKey.pem -out newPrivateKey.pem

Michael.

[German]

Ok I see, I tried it, but it was not easy to understand.

I had to find the openssl.exe in the directory:

C:\Program Files (x86)\Steganos Online Shield\openvpn64

the .pem ending doesn't make sense for me. I just typed in for example mykey.key instead of mykey.pem ... after that indeed I was able to delete the password out of the .key file. In the dos window it prompted me for the password.

[maikcat]

if your problem was solved please let me know to close the lopic...

Michael.

[German]

It works just like I described above .key instead .pem