Bug#1024275: [Pkg-utopia-maintainers] Bug#1024275: network-manager-openvpn: can't connect to vpn after last update: can't set proper cipher.

[Michael Biebl]

Control: severity -1 normal
Control: notforwarded -1

Am 16.11.22 um 22:54 schrieb Daniel Serpell:

Package: network-manager-openvpn
Version: 1.10.2-1
Severity: normal

Dear maintainer,

After upgrading to 1.10.2-1, I can't connect to the VPN anymore.

This is the logs from NetworkManager:

   nm-openvpn[]: [<vpn name>] Peer Connection Initiated with 
[AF_INET]<IP>:<PORT>
   nm-openvpn[]: OPTIONS ERROR: failed to negotiate cipher with server.  Add 
the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM') 
if you want to connect to this server.
   nm-openvpn[]: ERROR: Failed to apply push options
   nm-openvpn[]: Failed to open tun/tap interface
   nm-openvpn[]: SIGUSR1[soft,process-push-msg-failed] received, process 
restarting

Trying to change the cipher to AES-256-CBC in network properties does not work, 
it reverts back to AES-256-GCM.

I thus closed the upstream issue and dropped the forwarded meta data.



Regards,
Michael
[1] https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/

I recreated the failing OpenVPN connection and I can't reproduce the problem anymore. My recommendation, if you can still reproduce the issue, is to file the issue upstream [1] yourself. It's likely that upstream has further question.

OpenPGP_signature
Description: OpenPGP digital signature