Community discussions

MikroTik App
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 7:00 am

Hi is there any one the have set up the SSTP successful on beta 2 on win7 or vista?? I keep geting the broken http connection on my log and root certificate not trusted on the win ????
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 8:33 am

we will have numerous fixes for SSTP in beta3, but from the errors you have, it looks like bad config.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7042
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 8:47 am

If you are using self signed certificate then CA must be added to trusted root in windows.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 9:00 am

Thanks for replays! I have the CA added in Trusted Roots in Win still getting this error followed the manuals as is but not luck!? Is there any difference from web confi then cli ?

Thanks
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 10:17 am

Or may be i dont make the cert right? When i follow the manual for cert build with openssl i dont see th KR flag but when i use easy-rsa i have the KR flag which one should i use? And also i dont have a chain with openssl only with easy-rsa?

Some enlightening will be nice :)

Thanks
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 10:21 am

Please, post the command you have used to create certificate, post here the files with extension that you have as a result.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 10:34 am

Commands:

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 3650 -key ca.key -out ca.crt

openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr # With CN the ip address ot mikrotik tried with the name also but same error

openssl x509 -req -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt

Output:

-rw-r--r-- 1 root root 3.3K Jun 12 19:32 ca.key
-rw-r--r-- 1 root root 2.3K Jun 12 19:33 ca.crt
-rw-r--r-- 1 root root 3.3K Jun 12 19:46 server.key
-rw-r--r-- 1 root root 1.8K Jun 12 19:47 server.csr
drwxr-xr-x 2 root root 4.0K Jun 12 19:47 .
-rw-r--r-- 1 root root 2.0K Jun 12 19:48 server.crt

[root@backup ~]# openssl version
OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

P.S. Do you want the real files attached?



Thanks for the help!
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 12:05 pm

then you import crt file and then key, it is still without KR?
I'm using the same command and I have KR for the certificate.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 12:19 pm

Yeah see for yourself :) !?
You do not have the required permissions to view the files attached to this post.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 4:08 pm

Can you generate a certificate for me and i will try to import it ? CN 172.16.2.3

Thanks
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 4:12 pm

you can also email support to get the latest beta version where there are lots of SSTP improvements
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 4:35 pm

Thanks i will write to support.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 14, 2010 5:53 pm

Man.... :( Still no luck even with beta 3 going over a week now trying to solve this problem and i am out of ideas....beta 3 was my hope , I feel stupid... :shock: :?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: SSTP on Vista or Win7 successful ????

Tue Jun 15, 2010 8:59 am

Man.... :( Still no luck even with beta 3 going over a week now trying to solve this problem and i am out of ideas....beta 3 was my hope , I feel stupid... :shock: :?
did you get new beta 3 from support?
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Tue Jun 15, 2010 11:00 am

Yes but same error.I tried building the certificate with openssl version 1.0 and KR flag not showing when i build it with and easy-rsa(openssl version 0.98) KR flag is there :),also when i use the commands from manual for building the cert on version 0.98 the KR flag is also missing!?
When i open the certs they look ok with no problems.Something strange is going on with he certs :).Could you confirm with version of openssl or easy-rsa should i build them on?

God speed.


P.S. When i was playing with the certs import,delete and etc. on beta3 i think i hit a bug but dont know how to reproduce it, pppoe profiles disappeared after reboot and i had to downgrade to 4.10 and reset the config, just to let you know might be of use!
 
rpress
Member Candidate
Member Candidate
Posts: 113
Joined: Thu May 07, 2009 5:13 am

Re: SSTP on Vista or Win7 successful ????

Sat Jun 19, 2010 8:31 am

I had SSTP server working on beta1, but beta2 & beta3 give same root certificate error in Win7.
 
rpress
Member Candidate
Member Candidate
Posts: 113
Joined: Thu May 07, 2009 5:13 am

Re: SSTP on Vista or Win7 successful ????

Mon Jun 21, 2010 3:56 am

Aha, got it working, had to reload the certificate. My certificate is from cacert.org. IPv6 works over SSTP too. There is still some problem with beta3 as my memory is being eaten up; I have emailed support.
 
gdorm
newbie
Topic Author
Posts: 29
Joined: Sat Jun 12, 2010 7:14 pm
Location: Sofia,Bulgaria

Re: SSTP on Vista or Win7 successful ????

Mon Jun 21, 2010 12:46 pm

Thank you for the update which version you got it working on ?
 
rpress
Member Candidate
Member Candidate
Posts: 113
Joined: Thu May 07, 2009 5:13 am

Re: SSTP on Vista or Win7 successful ????

Mon Jun 21, 2010 6:04 pm

Thank you for the update which version you got it working on ?
5.0beta3

Who is online

Users browsing this forum: Bing [Bot], hanzaw and 71 guests