SSTP

If I want to connect to the server, windows fails to connect with 0x800B0109 (A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider)

I configured the SSTP server using the configuration on the Wiki. I used the create certificates manual in the Wiki. I also imported the CA key to Microtik. Both appear with the “KR” flag.

I added the CA to Windows 8 in the Trusted Root Certification Authorities and added this registry key to Windows: NoCertRevocationCheck set to one which does this:

You can use this registry entry to enable or to disable the SSL certificate revocation check that the VPN client performs during the SSL negotiation phase. Certificate revocation check will be performed if the value is set to 0. If the value is set to 1, certificate revocation check will be skipped. Notice that you should set this value to 1 only for debugging. Do not set this value to 1 in your production environment. By default, certificate revocation check is performed.

SSTP Log gives this:

09:54:17 sstp,info <sstp-0>: waiting for call... 
09:54:17 sstp,info <sstp-0>: terminating... - port error 
09:54:18 sstp,debug <sstp-0>: LCP lowerdown 
09:54:18 sstp,debug <sstp-0>: LCP down event in initial state 
09:54:18 sstp,info <sstp-0>: disconnected

Any ideas how to fix it?

I got the same error, but was able to make it work by manually specifying “Local computer” when importing the CA into the client (Win7).