community v.2.5.5 broken in windows 7

[temp3r]

Installing community version 2.5.5 in windows7 SP1 fails with error: "Service 'OpenVPNServiceInteractive' failed to start. Verify that you have sufficient privileges to start system services"

If i try to manually start service, it ends up with error 1053

2.5.3 is last version what installs successfully.

2.5.4- broken
2.5.5- broken

[temp3r]

Unable to attach attachment, so please find error screenshot here:
​https://www.upload.ee/image/13899066/ovpn2.png

If i try to attach image, i end up with error:
​https://www.upload.ee/image/13899116/ovpn4.png

[Gert Döring]

Could this be a code signing issue?

Or maybe MSVC built binaries needing more recent libraries?

Copying in @stipa and @selvanair, they understand windows...

[stipa]

2.5.5 works for me on Windows 7 (6.1 build 7601 SP1).

What is the output of "sc query OpenVPNServiceInteractive"? Anything interesting in event log?

[temp3r]

error_fresh_install

[temp3r]

Event Log

[temp3r]

I did clean install in 32bit, same result..
In first view nothing interesting in Event log, besides starting service error...
but in Eventlog security section there is something that might be related:

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Windows\System32\drivers\wintun.sys

Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Windows\System32\drivers\tap0901.sys

Attached error screenshot with relevant info and eventlog

[temp3r]

Unable to upload files as they are potential spam, are they?
​https://www.upload.ee/image/13912405/upload_spam_error.png

Anyways Fresh install of windows7 64bit was a little more chatty and it seems that problem is with with driver signing:
​https://www.upload.ee/image/13912407/64_error.png

64bit event logs:
​https://www.upload.ee/download/13912412/be579e74ae3b1a9cd318/64_bit_event.7z

[temp3r]

Is there any additional logging/debugging required from us?

[Gert Döring]

@mattock: wasn't there some shenannigans with SHA-something signatures and Windows7? Like, needing to install a hotfix or such? I forgot the details...

[Selva Nair]

The service is not starting because tap driver failed to install, it could be missing SHA-2 support. But how come only 2.5.4+ are affected?

The hotfix for Windows 7 is kb4474419:
Deatils here: ​sha-2 support
Download link: ​kb4474419 64bit
Or ​kb4474419 32bit

[Gert Döring]

Since we never heard from the original reporter, and we have confirmed test results of 2.5.4+ on Win7, I assume that this is related to SHA2 signing certs, and will proceed to close the ticket.