Bug#1024275: [Pkg-utopia-maintainers] Bug#1024275: network-manager-openvpn: can't connect to vpn after last update: can't set proper cipher.

[Michael Biebl]

Control: severity -1 serious
Control: forwarded -1

Am 16.11.22 um 22:54 schrieb Daniel Serpell:

Package: network-manager-openvpn
Version: 1.10.2-1
Severity: normal

Dear maintainer,

After upgrading to 1.10.2-1, I can't connect to the VPN anymore.

This is the logs from NetworkManager:

   nm-openvpn[]: [<vpn name>] Peer Connection Initiated with 
[AF_INET]<IP>:<PORT>
   nm-openvpn[]: OPTIONS ERROR: failed to negotiate cipher with server.  Add 
the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM') 
if you want to connect to this server.
   nm-openvpn[]: ERROR: Failed to apply push options
   nm-openvpn[]: Failed to open tun/tap interface
   nm-openvpn[]: SIGUSR1[soft,process-push-msg-failed] received, process 
restarting

Trying to change the cipher to AES-256-CBC in network properties does not work, 
it reverts back to AES-256-GCM.

I experience an OpenVPN connection failure as well and suspect it's the same underlying issue as yours. I therefor filed this upstream at https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/111

Marking as RC, so the buggy package doesn't migrate to testing.

Michael

Please follow up on the upstream bug report, if you have additional information.

OpenPGP_signature
Description: OpenPGP digital signature