Thanks Arne for chiming in and for pointing at that patch, which
according to [1] has been tested against Ubuntu 22.04 already.
I was worried about introducing a patch in Ubuntu can possibly downgrade
the OpenVPN security standards, but I see that the same change landed in
the master branch [2], s
To make this configuration with OpenSSL 3.0 and OpenVPN you need
tls-cert-profile insecure
which is not included in OpenvPN 2.5.5 in Ubuntu. The upstream commit is
https://github.com/OpenVPN/openvpn/commit/7b1b100557608db8a311d06f7578ceb7c4d33aa6
--
You received this bug notification because
Thank you for providing further info, Marcus. This is exactly what we
needed in order to continue the investigation.
The following line from the Jammy log file caught my attention:
Apr 13 00:50:01 slim nm-openvpn[3337388]: OpenSSL: error:0A00018E:SSL
routines::ca md too weak
This is the reason
** Attachment added: "Syslog of successfully connecting working openvpn
2.5.1-3ubuntu1.1"
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1968629/+attachment/5580218/+files/vpn-ok.syslog
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
** Attachment added: "Syslog of trying to connect nonworking openvpn
2.5.5-1ubuntu3"
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1968629/+attachment/5580219/+files/vpn-error.syslog
** Changed in: openvpn (Ubuntu)
Status: Incomplete => New
--
You received this bug notificat
Obviously I can't give you credentials to our VPN, but what other
information (besides the already attached files) would be useful?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1968629
Title:
OpenV
Hi Marcus,
Thanks for taking the time to file this bug and trying to make Ubuntu
better.
With the information you provided is hard to predict what is happening
in your system. Could you share any information/config files/steps to
reproduce this issue? Otherwise we cannot act on this bug.
I am se
