[RESOLVED] tis-openvpn package - Deployment failed

[rflandrois]

Good morning,
I am unable to deploy the OpenVpn package on various machines on my network.
I get an error message telling me that the openvpn-drivers.crt certificate could not be integrated into the TrustedPublisher store.
How can this be circumvented or resolved?

The error log is shown below.

Code: Select all

Traceback (most recent call last):
  File "C:\Program Files (x86)\wapt\common.py", line 3876, in install_wapt
    exitstatus = setup.install()
  File "c:\windows\temp\waptenxktl\setup.py", line 25, in install
  File "C:\Program Files (x86)\wapt\common.py", line 3646, in run
    return ensure_unicode(setuphelpers.run(*arg,**args))
  File "C:\Program Files (x86)\wapt\setuphelpers_windows.py", line 3716, in run
    raise CalledProcessErrorOutput(proc.returncode,cmd,''.join(output))
CalledProcessErrorOutput: Command '"C:\\WINDOWS\\system32\\certutil.exe" -addstore TrustedPublisher "c:\\windows\\temp\\waptenxktl\\openvpn-drivers.crt"' returned non-zero exit status -2147024894.
Output:TrustedPublisher "\u2554diteurs approuv\xdas"
Impossible d\xc6ouvrir de magasin de certificats existant. Utilisez l\xc6option -f

pour forcer la cr\xdaation du magasin de certificats.
CertUtil\xe1: -addstore \u2554CHEC de la commande\xe1: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
CertUtil: Le fichier sp\xdacifi\xda est introuvable.

CalledProcessErrorOutput: Command '"C:\\WINDOWS\\system32\\certutil.exe" -addstore TrustedPublisher "c:\\windows\\temp\\waptenxktl\\openvpn-drivers.crt"' returned non-zero exit status -2147024894.
Output:TrustedPublisher "╔diteurs approuvÚs"
Impossible dÆouvrir de magasin de certificats existant. Utilisez lÆoption -f

pour forcer la crÚation du magasin de certificats.
CertUtilá: -addstore ╔CHEC de la commandeá: 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND)
CertUtil: Le fichier spÚcifiÚ est introuvable.

- Installed WAPT version: 1.8.2.7267
- Server OS: Debian 10
- Operating system of the administration/package creation machine: Windows 2016
- Target machine operating system: Windows 10 2004

[rflandrois]

Hello,
I found a workaround by deploying the manufacturer's certificate via GPO.
It's not ideal, but it will do for now.
If anyone has a more official solution, I'd be grateful.

[jpele]

Hello,

This is a good workaround. Alternatively, the certutil.exe file could be included in the package, but this might cause compatibility issues with different operating systems.

I will adapt the package so that it no longer crashes if necessary.

Regards,
Jimmy