Private bug reported:

If you modify existing OpenVPN connection NetworkManager does not
reflect them without restart

I changed path for files (other directory), yet it still tries to load
the old path

mastier@drakkar:~$ nmcli con up 'Canonical UK'
Error: Connection activation failed: Unknown reason
Hint: use 'journalctl -xe NM_CONNECTION=9328632c-dcb0-4414-8609-20285bf0acb8 + 
NM_DEVICE=eno1' to get more details.

mastier@drakkar:~$ grep -iHR openvpn /var/log/syslog|tail
/var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Exiting due to 
fatal error
/var/log/syslog:May 26 15:16:55 drakkar NetworkManager[5372]: <info>  
[1685107015.3225] 
vpn[0x555f6a6a6750,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: DEPRECATED OPTION: 
--cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Exiting due to 
fatal error
/var/log/syslog:May 26 15:19:40 drakkar NetworkManager[5372]: <info>  
[1685107180.3388] 
vpn[0x555f6a6a69d0,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: DEPRECATED OPTION: 
--cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Exiting due to 
fatal error

$ nmcli con show 'Canonical UK' |grep Docum
vpn.data:                               ca = 
/home/mastier/Documents/canonical-vpn/canonical_ca.crt, cert = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.crt, cert-pass-flags = 
0, cipher = AES-128-CBC, comp-lzo = adaptive, connection-type = tls, dev = tun, 
dev-type = tun, key = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.key, ping = 10, 
ping-restart = 60, remote = uk.sesame.canonical.com:29419, remote-cert-tls = 
server, ta = /home/mastier/Documents/vpn/canonical_ta.key, ta-dir = 1, 
verify-x509-name = name:access.is

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: network-manager-openvpn 1.8.18-1
ProcVersionSignature: Ubuntu 6.1.0-1012.12-oem 6.1.25
Uname: Linux 6.1.0-1012-oem x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu82.4
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
Date: Fri May 26 15:21:21 2023
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: network-manager-openvpn
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: network-manager (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: network-manager-openvpn (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy wayland-session

** Information type changed from Public to Private

** Description changed:

- If you modify existing VPC connection NetworkManager does not reflect
- them without restart
+ If you modify existing OpenVPN connection NetworkManager does not
+ reflect them without restart
  
  I changed path for files (other directory), yet it still tries to load
  the old path
  
  mastier@drakkar:~$ nmcli con up 'Canonical UK'
  Error: Connection activation failed: Unknown reason
  Hint: use 'journalctl -xe NM_CONNECTION=9328632c-dcb0-4414-8609-20285bf0acb8 
+ NM_DEVICE=eno1' to get more details.
  
  mastier@drakkar:~$ grep -iHR openvpn /var/log/syslog|tail
  /var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Exiting due to 
fatal error
  /var/log/syslog:May 26 15:16:55 drakkar NetworkManager[5372]: <info>  
[1685107015.3225] 
vpn[0x555f6a6a6750,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: DEPRECATED 
OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Exiting due to 
fatal error
  /var/log/syslog:May 26 15:19:40 drakkar NetworkManager[5372]: <info>  
[1685107180.3388] 
vpn[0x555f6a6a69d0,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: DEPRECATED 
OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Exiting due to 
fatal error
  
- 
  $ nmcli con show 'Canonical UK' |grep Docum
  vpn.data:                               ca = 
/home/mastier/Documents/canonical-vpn/canonical_ca.crt, cert = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.crt, cert-pass-flags = 
0, cipher = AES-128-CBC, comp-lzo = adaptive, connection-type = tls, dev = tun, 
dev-type = tun, key = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.key, ping = 10, 
ping-restart = 60, remote = uk.sesame.canonical.com:29419, remote-cert-tls = 
server, ta = /home/mastier/Documents/vpn/canonical_ta.key, ta-dir = 1, 
verify-x509-name = name:access.is
  
  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: network-manager-openvpn 1.8.18-1
  ProcVersionSignature: Ubuntu 6.1.0-1012.12-oem 6.1.25
  Uname: Linux 6.1.0-1012-oem x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.11-0ubuntu82.4
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: ubuntu:GNOME
  Date: Fri May 26 15:21:21 2023
  ProcEnviron:
-  TERM=xterm-256color
-  PATH=(custom, no user)
-  XDG_RUNTIME_DIR=<set>
-  LANG=en_US.UTF-8
-  SHELL=/bin/bash
+  TERM=xterm-256color
+  PATH=(custom, no user)
+  XDG_RUNTIME_DIR=<set>
+  LANG=en_US.UTF-8
+  SHELL=/bin/bash
  SourcePackage: network-manager-openvpn
  UpgradeStatus: No upgrade log present (probably fresh install)

** Also affects: network-manager (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager-openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/2020893

Title:
  Changing path for the certificates and keys doesn't work

Status in network-manager package in Ubuntu:
  New
Status in network-manager-openvpn package in Ubuntu:
  New

Bug description:
  If you modify existing OpenVPN connection NetworkManager does not
  reflect them without restart

  I changed path for files (other directory), yet it still tries to load
  the old path

  mastier@drakkar:~$ nmcli con up 'Canonical UK'
  Error: Connection activation failed: Unknown reason
  Hint: use 'journalctl -xe NM_CONNECTION=9328632c-dcb0-4414-8609-20285bf0acb8 
+ NM_DEVICE=eno1' to get more details.

  mastier@drakkar:~$ grep -iHR openvpn /var/log/syslog|tail
  /var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Exiting due to 
fatal error
  /var/log/syslog:May 26 15:16:55 drakkar NetworkManager[5372]: <info>  
[1685107015.3225] 
vpn[0x555f6a6a6750,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: DEPRECATED 
OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Exiting due to 
fatal error
  /var/log/syslog:May 26 15:19:40 drakkar NetworkManager[5372]: <info>  
[1685107180.3388] 
vpn[0x555f6a6a69d0,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: 
starting openvpn
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: DEPRECATED 
OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers 
(AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for 
cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 
'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Cannot pre-load 
keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
  /var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Exiting due to 
fatal error

  $ nmcli con show 'Canonical UK' |grep Docum
  vpn.data:                               ca = 
/home/mastier/Documents/canonical-vpn/canonical_ca.crt, cert = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.crt, cert-pass-flags = 
0, cipher = AES-128-CBC, comp-lzo = adaptive, connection-type = tls, dev = tun, 
dev-type = tun, key = 
/home/mastier/Documents/canonical-vpn/canonical-mastier.key, ping = 10, 
ping-restart = 60, remote = uk.sesame.canonical.com:29419, remote-cert-tls = 
server, ta = /home/mastier/Documents/vpn/canonical_ta.key, ta-dir = 1, 
verify-x509-name = name:access.is

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: network-manager-openvpn 1.8.18-1
  ProcVersionSignature: Ubuntu 6.1.0-1012.12-oem 6.1.25
  Uname: Linux 6.1.0-1012-oem x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.11-0ubuntu82.4
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: ubuntu:GNOME
  Date: Fri May 26 15:21:21 2023
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: network-manager-openvpn
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/2020893/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to