sstp - cant connect

RouterOS Beginner Basics
1

Hi,

Just tried to setup up sstp-server on my mikrotik rb750 running 5.0rc5. But i cant connect with windows 7 clients.
I use self signed certs done through easy-rsa. And those work with openvpn on the same rb750.

I just created new certs, because I saw that the old once where missing my FQDN under CN. So thats corrected now.
And has the flags “KR” on the RB.
The CA-cert has also been added to trusted root ca in windows.


The error message that i get on the sstp client in windows: …root cert is not trusted by trust provider…

And the log in my RB750 tells me:
echo: sstp,info fw-sstp: : waiting for call…
echo: sstp,info fw-sstp: : terminating… - broken http connection
echo: sstp,debug fw-sstp: : LCP lowerdown
echo: sstp,debug fw-sstp: : LCP down event in initial state
echo: sstp,info fw-sstp: : disconnected

I found 2 old forum posts about this, but without any solution.


Please help :slight_smile:

2

I solved it!

The problem was that I imported the cert in the windows client under “trusted root CA” for “My User Account”.
When I in fact should have placed it under “trusted root CA” for “Computer account”.

That did the trick.

3

That did it for me too. Adding the Root Cert to the Computer Account works fine now.

regards

4

On Windows 7 x64 SP1, I had to import the CA.crt into “Trusted Root Certification Authorities\Local Computer”. I found that by checking “Show physical stores.” I imported my client.crt into “Personal\Local Computer” discovered the same way.

5

Our script for Self CA

::
:: Import Certificates
::
certutil -addstore Root D:\ca.crt
certutil -addstore TrustedDevices D:\rb-openvpn-server.crt
::
:: Create record in hosts file
echo. >>%SystemRoot%\System32\drivers\etc\hosts
echo 88.88.88.88 rb-openvpn-server >>%SystemRoot%\System32\drivers\etc\hosts
::
pause
::