Your message dated Tue, 11 Nov 2014 21:39:29 +0100
with message-id <[email protected]>
and subject line Re: [Pkg-utopia-maintainers] Bug#504917:
network-manager-openvpn: cannot connect using method X509 certificates
has caused the Debian Bug report #504917,
regarding network-manager-openvpn: cannot connect using method X509 certificates
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
504917: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504917
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: network-manager-openvpn
Version: 0.3.2svn2855-1.1
Severity: important
I am trying to connect using the X509 certificates method.
I broke my pkcs12 to the three certs required (although I believe the gui
should support directly pkcs12 files but that's another story)
and filled the three fields. The key file is of course
protected with a PEM passphrase. The problem is that the gui fails because
it cannot unlock the key file, naturally because it never asks for the
passphrase.
Here's what I get on syslog:
Nov 7 23:54:28 mordor NetworkManager: <info> Will activate VPN
connection 'noc', service 'org.freedesktop.NetworkManager.openvpn',
user_name 'gpall', vpn_data 'connection-type / x509 / remote /
155.207.212.10 / port / 53 / ca /
/home/gpall/various/openvpn-certs/userca.pem / cert /
/home/gpall/various/openvpn-certs/usercert.pem / key /
/home/gpall/various/openvpn-certs/userkey.pem / cipher / DESX-CBC /
comp-lzo / yes / shared-key / / username / [email protected] / local-ip
/ / remote-ip / / dev / tap / proto / udp / ta-dir / none', route ''.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 1 of 4 (Connection Prepare) scheduled...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 1 of 4 (Connection Prepare) ran VPN service daemon
org.freedesktop.NetworkManager.openvpn (PID 16008)
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 1 of 4 (Connection Prepare) complete.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 2 of 4 (Connection Prepare Wait) scheduled...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN service
'org.freedesktop.NetworkManager.openvpn' signaled state change 1 -> 6.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 2 of 4 (Connection Prepare Wait) waiting...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 2 of 4 (Connection Prepare Wait) complete.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 3 of 4 (Connect) scheduled...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 3 of 4 (Connect) sending connect request.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 3 of 4 (Connect) request sent, waiting for reply...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN service
'org.freedesktop.NetworkManager.openvpn' signaled state change 6 -> 3.
Nov 7 23:54:28 mordor nm-openvpn[16010]: OpenVPN 2.1_rc11
i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Sep 18 2008
Nov 7 23:54:28 mordor nm-openvpn[16010]: WARNING: No server certificate
verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Nov 7 23:54:28 mordor nm-openvpn[16010]: NOTE: the current
--script-security setting may allow this configuration to call
user-defined scripts
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 3 of 4 (Connect) reply received.
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 4 of 4 (IP Config Get) timeout scheduled...
Nov 7 23:54:28 mordor NetworkManager: <info> VPN Activation (noc)
Stage 3 of 4 (Connect) complete, waiting for IP configuration...
Nov 7 23:54:43 mordor NetworkManager: <WARN>
nm_vpn_service_process_signal(): VPN failed for service
'org.freedesktop.NetworkManager.openvpn', signal 'ConnectFailed', with
message 'The VPN login failed because the VPN program could not connect
to the VPN server.'.
Nov 7 23:54:43 mordor nm-openvpn[16010]: ERROR: could not read Private
Key username/password/ok/string from management interface
Nov 7 23:54:43 mordor nm-openvpn[16010]: Exiting
Nov 7 23:54:43 mordor NetworkManager: <info> VPN service
'org.freedesktop.NetworkManager.openvpn' signaled state change 3 -> 5.
Nov 7 23:54:43 mordor NetworkManager: <info> VPN service
'org.freedesktop.NetworkManager.openvpn' signaled state change 5 -> 6.
Nov 7 23:54:43 mordor NetworkManager: <WARN>
nm_vpn_service_stop_connection(): (VPN Service
org.freedesktop.NetworkManager.openvpn): could not stop connection 'noc'
because service was 6.
The same gui in Ubuntu Intrepid, for the same authentication method, has
an extra field called Private Key password, and everything works fine there.
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages network-manager-openvpn depends on:
ii libc6 2.7-15 GNU C Library: Shared libraries
ii libdbus-1-3 1.2.1-4 simple interprocess
messaging syst
ii libdbus-glib-1-2 0.76-1 simple interprocess
messaging syst
ii libglib2.0-0 2.16.6-1 The GLib library of C routines
ii openvpn 2.1~rc11-1 virtual private network daemon
network-manager-openvpn recommends no packages.
network-manager-openvpn suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Am 11.11.2014 um 21:15 schrieb Γιώργος Πάλλας:
> Please close this bug. I opened it 7 years ago and since then it is
> resolved.
Ok, doing so.
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
