Public bug reported:

I needed to connect to a Cisco VPN. I imported a pcf file, but after
that the VPN failed. After testing with the vpnc commandline client it
seems that the VPN concentrator is configured for 1DES and that vpnc
disables that by default (which is good).

The error from vpnc
------------------------------------------------
vpnc: peer selected (single) DES as "encryption" method.
This algorithm is considered too weak today
If your vpn concentrator admin still insists on using DES
use the "--enable-1des" option
------------------------------------------------

The setting as described in the manpage.
------------------------------------------------
       --enable-1des
              enables weak single DES encryption
       conf-variable: Enable Single DES
------------------------------------------------

After setting the option to enable single DES the VPN worked.

Then I went to the network manager settings: VPN->Advanced->Encryption
Method and I changed it to 'Weak'. Then it VPN worked.


What I expect if I connect to a 1DES Cisco VPN with the default settings is:
- NetworkManager detects that the encryption method doesn't match and gives an 
error like "Encryption method mismatch: Local=Strong Remote=Weak, Go to 
advanced settings to change it" (Or a warning like "Remote VPN is configured 
for weak encryption: Continue or Abort?")

** Affects: network-manager-vpnc (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1190886

Title:
  VPN fails if remote uses DES

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-vpnc/+bug/1190886/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to