need help setting up ADCS on windows 7 64bit

Asked by Seth Gordon

alright, back again for probably another really dumb mistake so hopefully i can get it fixed without too much pain involved.
I'm trying to set up encryption on my hub and i tried to follow the instructions listed in the basic guide but I must have made a mistake somewhere.

Here's the process I went through(included screenshots)
 I go to my ADCH++ directory and i open up "Generate_certs.cmd"
http://oi41.tinypic.com/11tv7nk.jpg

So at this point i figured i gotta grab Win32 OpenSSL. I head over to http://slproweb.com/products/Win32OpenSSL.html and download it.
I then run it and i get this pop up during installation.
http://oi39.tinypic.com/2yl7no2.jpg

So i grab Microsoft Visual C++ 2008 Redistributable Package (x86) and install that. Then i retry the OpenSSL installation. And it seems to be installed correctly. I also tried Microsoft Visual C++ 2008 Redistributable Package (x64) with the OpenSSL 64bit version and i got the same results.

Now, I head over again to the "Generate_certs.cmd" file and open it up and it gives me an error message as before about OpenSSL not being found.
http://oi42.tinypic.com/11mgg8g.jpg

So i open up "Generate_certs.cmd" in notepad and see that it's calling on OpenSSL in a directory that's non-existant so i manually change it to where it is on my computer.

Before
http://oi41.tinypic.com/1hcyvt.jpg

After
http://oi43.tinypic.com/205far9.jpg

I save that and finally am able to run "Generate_certs.cmd" succesffully(sort of). Here's a few screenshots of what happens during the generation of certificates process:
I get this "Warning: cant open config file" message. But the process seems to go on.
http://oi40.tinypic.com/24fbgi9.jpg

This is the next thing i see.
http://oi42.tinypic.com/33ngw10.jpg

A minute or so later:
http://oi44.tinypic.com/ejfvgw.jpg

I seem to be missing a cert(or more?). I don't see this one anywhere "cacert.pem" and all i'm left with in my G:\ADCH++\certs directory is this:
http://oi43.tinypic.com/2vmzx93.jpg

I open up the adchpp.xml file and edit it with the following line:
http://oi42.tinypic.com/e6ykbs.jpg

I save it, close the file and turn on ADCH++. Then I go ahead and try to connect to my hub using airdc++ 2.44 64-bit and i get this:
[15:52:09] *** Connecting to adcs://myhub.no-ip.org:2781 ...
[15:52:39] *** Connection timeout

So this is where i'm stuck at. Any help would be appreciated. Sorry about being so detailed, just trying to make sure i listed as much info as possible.

Question information

Language:
English Edit question
Status:
Solved
For:
ADCH++ Edit question
Assignee:
No assignee Edit question
Solved by:
eMTee
Solved:
Last query:
Last reply:
Revision history for this message
eMTee (realprogger) said :
#1

One of the 3 files needed to be generated is missing. Quote from the guide:

"If you run the certificate files generator script under Windows its recommended to install OpenSSL to its default folder (into Program Files) and run the script in elevated mode (as Administrator) on Vista and later."

Program Files means "C:\Program Files". Don't ask why, but it often doesn't work if it's installed elsewhere (complain at Win32OpenSSL support if you wanna find out why).
Also, I don't think anyone ever tried the 64 bit version of Win32OpenSSL (to generate certs for ADCH++) so it's best to try with the 32 bit one even on a 64 bit system.

Revision history for this message
Seth Gordon (sethgordon) said :
#2

yeah, already tried several different install locations including that. no matter what location i try or combination of 64-bit and 32-bit OpenSSL i try, i still can't get more than 2 certs to be generated. any other clue as to what i can try? i moved around the install directories of ADCH++ to to my C drive and that didn't yield any different results.

Revision history for this message
Best eMTee (realprogger) said :
#3

Googling the error message "WARNING: can’t open config file: /usr/local/ssl/openssl.cnf" gives the solution of the problem. In the recent builds they probably changed the default value of the OPENSSL_CONF variable from C:\Program Files\OpenSSL\bin to something else hence it doesn't work anymore without setting up that env variable.
And obiviously by default they don't check for that .cfg file the directory OpenSSL. exe started from, that'd be far too user friendly I suppose...

I updated the docs in the website, made some things more clear about setting up the adchpp.xml and ADCS. I also added a link to the basic guide pointing to a new Windows cert gen script that tries to cope with the Win32OpenSSL installation path's. Now it should work when OpenSSL resides in the path offered in the installer by default as well as if it's installed to C:\Program Files\OpenSSL

Revision history for this message
Seth Gordon (sethgordon) said :
#4

thanks man. i troubleshooted that "WARNING: can’t open config file: /usr/local/ssl/openssl.cnf" and finally got it to generate that missing cert that i couldn't get before. I'm quite not sure why it didn't occur to me to do that earlier I had to run "Generate_certs.cmd" from the same command window to get it to work. If i right click-->run as administrator on Generate_certs.cmd, it gave me the same error as before. I was asked a whole bunch of questions this time during the process to input which i definitely did not see before like country of origin, state, company name, etc.

So i got all my certs generated. Thanks again man, really appreciate it.