Your message dated Mon, 6 Oct 2025 12:07:07 +0200
with message-id <[email protected]>
and subject line Re: network-manager-openvpn-gnome: GUI import/edit drops
crucial "data-ciphers" option from config
has caused the Debian Bug report #1107240,
regarding network-manager-openvpn-gnome: GUI import/edit drops crucial
"data-ciphers" option from config
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1107240: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107240
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: network-manager-openvpn-gnome
Version: 1.12.0-2
Severity: important
Tags: patch
Dear Maintainer,
I am a user of an OpenVPN service which uses the AES-256-CBC cipher,
meaning the --data-ciphers option needs to be used. Support for this
option in the network-manager-openvpn backend was added as part of the
fix for #1012664. However, the Gnome GUI (as opposed to nmcli) is still
unaware of this option, and will delete it from the configuration both
when creating a new connection via import of an ovpn file, as well as
when editing an existing working connection, for example one that has
been created from an ovpn file with nmcli.
There is an upstream bug about this:
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/110
and it has a fairly simple patch / MR:
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/merge_requests/86
I can confirm that building network-manager-openvpn-gnome 1.12.0-2 with
this patch included fixes the issue: I can correctly import an opvn
config file containing data-ciphers, and I can edit an existing VPN
connection containing that option without it being deleted.
Looking at the lack of progress / upstream response on this issue (which
I think might have to do with their desire to support older openvpn
versions as well, needing more complex logic), I'm asking for this patch
to be included in the Debian package for the time being.
Thank you
Florian
-- System Information:
Debian Release: 13.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.27-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE
not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages network-manager-openvpn-gnome depends on:
ii libc6 2.41-8
ii libglib2.0-0t64 2.84.2-1
ii libgtk-3-0t64 3.24.49-3
ii libgtk-4-1 4.18.5+ds-1
ii libnm0 1.52.0-6
ii libnma-gtk4-0 1.10.6-5
ii libnma0 1.10.6-5
ii libsecret-1-0 0.21.7-1
ii network-manager-openvpn 1.12.0-2
network-manager-openvpn-gnome recommends no packages.
network-manager-openvpn-gnome suggests no packages.
-- no debconf information
smime.p7s
Description: S/MIME Cryptographic Signature
--- End Message ---
--- Begin Message ---
Version: 1.12.2-1
On Tue, 3 Jun 2025 17:44:53 +0200 Florian Schlichting
<[email protected]> wrote:
There is an upstream bug about this:
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/110
and it has a fairly simple patch / MR:
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/merge_requests/86
I can confirm that building network-manager-openvpn-gnome 1.12.0-2 with
this patch included fixes the issue: I can correctly import an opvn
config file containing data-ciphers, and I can edit an existing VPN
connection containing that option without it being deleted.
This has been applied in
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/commit/ef27d6002bef58322051f594462e4655e2bd3ba5
The first debian version shipping that fix is 1.12.2-1, so closing for
that version.
Regards,
Michael
OpenPGP_signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
