Your message dated Tue, 15 Nov 2022 18:02:00 +0000
with message-id <[email protected]>
and subject line Bug#1012664: fixed in network-manager-openvpn 1.10.2-1
has caused the Debian Bug report #1012664,
regarding network-manager-openvpn: --cipher option deprecated in OpenVPN 2.6,
no option to set suggested --data-ciphers flag instead
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1012664: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012664
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: network-manager-openvpn
Version: 1.8.18-3
Severity: important
X-Debbugs-Cc: [email protected]
Dear Maintainer,
* What led up to the situation?
I have a subscription to an OpenVPN service which uses the AES-256-CBC
cipher. This was configured using the nm-openvpn-gnome UI and up until
the most recent OpenVPN version worked well albeit with a warning in
the daemon.log file that the --cipher flag was to be deprecated. Now,
having updated OpenVPN, the connection now fail because the flag is
now ignored. OpenVPN logs the suggestion that the cipher I need should
be added to the --data-ciphers list.
from daemon.log:
nm-openvpn[3234]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but
missing in --data-ciphers
(AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher
for cipher negotiations.
...
nm-openvpn[3234]: OPTIONS ERROR: failed to negotiate cipher with
server. Add the server's cipher ('AES-256-CBC') to --data-ciphers
(currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to
connect to this server.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Just trying to enable the VPN fails due to the required cipher not
being in the --data-ciphers list. There is no obvious way to do this
with the nm-openvpn tool, a quick glance at the source implies that
the --cipher flag is hardcoded there.
I tried adding the --data-cipher list including the AES-256-CBC cipher
to the /etc/default/openvpn file but that didn't seem to help.
* What was the outcome of this action?
I have been trying to recompile the network-manager-openvpn package
from source having modified it but so far have been unsuccessful due
to unfamiliarity with packaging.
* What outcome did you expect instead?
If nm-openvpn passes the correct flags then I expect the connection to
come up and work - it was fully operational with the previous OpenVPN
release. I will try configuring an OpenVPN client config file by hand
but obviously the nm-openvpn tool will need to be updated to reflect
the changes to OpenVPN itself.
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 5.17.0-1-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8),
LANGUAGE=en_IE:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages network-manager-openvpn depends on:
ii adduser 3.121
ii libc6 2.33-7
ii libglib2.0-0 2.72.1-1
ii libnm0 1.38.0-2
ii network-manager 1.38.0-2
ii openvpn 2.6.0~git20220518+dco-2
network-manager-openvpn recommends no packages.
network-manager-openvpn suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: network-manager-openvpn
Source-Version: 1.10.2-1
Done: Michael Biebl <[email protected]>
We believe that the bug you reported is fixed in the latest version of
network-manager-openvpn, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Biebl <[email protected]> (supplier of updated network-manager-openvpn
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 15 Nov 2022 18:29:34 +0100
Source: network-manager-openvpn
Architecture: source
Version: 1.10.2-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Michael Biebl <[email protected]>
Closes: 1012664
Changes:
network-manager-openvpn (1.10.2-1) unstable; urgency=medium
.
* New upstream version 1.10.2
- Add support for OpenVPN's --data-ciphers as introduced in 2.6
(Closes: #1012664)
Checksums-Sha1:
6a63a0c4d119be18d91ada92ae73c5d2cca0ebb4 2395
network-manager-openvpn_1.10.2-1.dsc
7f1f77249db0f28bae1168f9452fe20cfd0a4b19 701652
network-manager-openvpn_1.10.2.orig.tar.xz
d365d63aba25dbc75d1a6334bb4b7e8499532c22 7604
network-manager-openvpn_1.10.2-1.debian.tar.xz
4fee8807f89ccb571824cf92d1c6b3980e7d6bf3 14436
network-manager-openvpn_1.10.2-1_source.buildinfo
Checksums-Sha256:
4553aae2397f54507224210a31542ea5d6d60d2a809eab4bc0ca060601e3145a 2395
network-manager-openvpn_1.10.2-1.dsc
62f0f2a8782221b923f212ac2a8ebbc1002efd6a90ee945dad4adfb56d076d21 701652
network-manager-openvpn_1.10.2.orig.tar.xz
ce938013397468a871098b089754118692907777a079fea06fc9f4b005c212b9 7604
network-manager-openvpn_1.10.2-1.debian.tar.xz
d84fd32e93e5223e7b6cc203baef2e5dd4c2073cd2db8a0697b9776d5b77a81b 14436
network-manager-openvpn_1.10.2-1_source.buildinfo
Files:
5b8f8103c88e87489bfd0fe89ae40fe2 2395 net optional
network-manager-openvpn_1.10.2-1.dsc
3a7cb5ac3d33bd8b22dc9f4b58216b5b 701652 net optional
network-manager-openvpn_1.10.2.orig.tar.xz
b78fb161c892475d0da699c3029e2ae4 7604 net optional
network-manager-openvpn_1.10.2-1.debian.tar.xz
b74077043ad22f37b19fd5f6bfcd316e 14436 net optional
network-manager-openvpn_1.10.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=vCnh
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
