Hi,

I confirm, I had this error when connecting to my VPN which advertises
107 routes:

Mar  7 18:11:52 ubuntu16 nm-openvpn[2627]: OpenVPN ROUTE: cannot add
more than 100 routes -- please increase the max-routes option in the
client configuration file

After installing the proposed fix and configuring in the NM-openvpn GUI
the routes to 200, the problem was gone and I was able to logon to the
VPN.

In which version official version will this be introduced?

Regards,

Marco

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager-openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

Status in NetworkManager-OpenVPN:
  Fix Released
Status in network-manager-openvpn package in Ubuntu:
  Fix Released
Status in network-manager-openvpn source package in Xenial:
  Fix Committed
Status in network-manager-openvpn source package in Yakkety:
  Triaged
Status in network-manager-openvpn source package in Zesty:
  Fix Released

Bug description:
  [Impact]

  network-manager-openvpn does not support the openvpn --max-routes switch.
  This means that per omission the VPN connection supports 100 routes that can 
be pushed by the openvpn server to the client. If the openvpn server pushes 
more than 100 routes, the VPN establishment fails.

  From OpenVPN manual:
  "--max-routes n
  Allow a maximum number of n --route options to be specified, either in the 
local configuration file, or pulled from an OpenVPN server. By default, n=100."

  The attached patch comes from upstream's fix (see linked Gnome bug)
  and adds a new option to the NM Advanced section for network-manager-
  openvpn.

  [Test Case]
  1. Configure an OpenVPN server to push > 100 routes
  2. Set up a connection to it using network-manager-openvpn
  3. Attempt to connect

  Before this fix, the connection would fail, and you'd not be able to
  resolve it using Network Manager.

  After the fix, the connection will fail, but one can use the UI, in
  the Advanced section, to configure the maximum number of routes to be
  >= the number sent.

  [Regression Potential]

  Two broad areas -
  1) the UI could be messed up, and make it difficult or impossible to 
configure VPNs. Or,

  2) the establishment of a VPN could fail, both 
  2.a) with peers that push < 100 routes
  2.b) with peers that push > 100 routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to