[Bug 1617098] Re: Add support for option max-routes

[Launchpad Bug Tracker]

This bug was fixed in the package network-manager-openvpn -
1.1.93-1ubuntu1.1

---
network-manager-openvpn (1.1.93-1ubuntu1.1) xenial; urgency=medium

  * Add support for max-routes configuration. Cherry-picked from upstream Git.
(LP: #1617098)

 -- Adam Collard   Mon, 20 Feb 2017 14:16:41
+

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Marco]

Hi,

I confirm, I had this error when connecting to my VPN which advertises
107 routes:

Mar  7 18:11:52 ubuntu16 nm-openvpn[2627]: OpenVPN ROUTE: cannot add
more than 100 routes -- please increase the max-routes option in the
client configuration file

After installing the proposed fix and configuring in the NM-openvpn GUI
the routes to 200, the problem was gone and I was able to logon to the
VPN.

In which version official version will this be introduced?

Regards,

Marco

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Anthony Harrington ]

This is now working in 1.1.93-1ubuntu1.1 on xenial. However as an aside,
I'd like to find the translation string for the new option since it
says:

"Specify the maximum number of routes the server is allowed so specify."

Which should at a minimum change the 'so' to 'to', but better still not say 
'specify' repeatedly.
The string isn't available to change on launchpad in 
network-manager(-gnome/-openvpn) etc

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Steve Langasek]

Hello Marco, or anyone else affected,

Accepted network-manager-openvpn into xenial-proposed. The package will
build now and be available at https://launchpad.net/ubuntu/+source
/network-manager-openvpn/1.1.93-1ubuntu1.1 in a few hours, and then in
the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Status: Confirmed => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Mathieu Trudel-Lapierre]

** Also affects: network-manager-openvpn (Ubuntu Yakkety)
   Importance: Undecided
   Status: New

** Changed in: network-manager-openvpn (Ubuntu Yakkety)
   Status: New => Triaged

** Changed in: network-manager-openvpn (Ubuntu Yakkety)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Adam Collard]

** Description changed:

- Hi,
+ [Impact]
  
- Currently in Ubuntu 16.04 network-manager-openvpn does not support the 
openvpn --max-routes switch.
- This means that per omission the VPN connection supports 100 routes that can 
be pushed by the openvpn server to the client. If the openvpn server pushes 
more 100 routes, which can happen in some cases, the VPN establishment fails.
+ network-manager-openvpn does not support the openvpn --max-routes switch.
+ This means that per omission the VPN connection supports 100 routes that can 
be pushed by the openvpn server to the client. If the openvpn server pushes 
more than 100 routes, the VPN establishment fails.
  
  From OpenVPN manual:
  "--max-routes n
  Allow a maximum number of n --route options to be specified, either in the 
local configuration file, or pulled from an OpenVPN server. By default, n=100."
  
- Can you do one of the following?
- - Fully support max-routes in the GUI, with an option to choose the value of 
the max-routes
- or, simpler:
- - Do not implement the max-routes in the GUI but add '--max-routes 500' for 
example for all openvpn connection establishments. I mean increase the number 
of maximum routes for all openvpn connections with network-manager.
+ The attached patch comes from upstream's fix (see linked Gnome bug) and
+ adds a new option to the NM Advanced section for network-manager-
+ openvpn.
  
- There is also a gnome bugzilla related to this issue which was recently
- closed with a patch: https://bugzilla.gnome.org/show_bug.cgi?id=720097
+ [Test Case]
+ 1. Configure an OpenVPN server to push > 100 routes
+ 2. Set up a connection to it using network-manager-openvpn
+ 3. Attempt to connect
  
- When can we have the max-route implementation on network-manager-openvpn
- in ubuntu?
+ Before this fix, the connection would fail, and you'd not be able to
+ resolve it using Network Manager.
  
- mm:~$ lsb_release -rd
- Description:  Ubuntu 16.04.1 LTS
- Release:  16.04
+ After the fix, the connection will fail, but one can use the UI, in the
+ Advanced section, to configure the maximum number of routes to be >= the
+ number sent.
  
- mm:~$ apt-cache policy network-manager-openvpn
- network-manager-openvpn:
-   Installed: 1.1.93-1ubuntu1
-   Candidate: 1.1.93-1ubuntu1
-   Version table:
-  *** 1.1.93-1ubuntu1 500
- 500 http://pt.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
- 100 /var/lib/dpkg/statusThanks,
+ [Regression Potential]
  
- mm:~$ apt-cache policy network-manager-openvpn-gnome
- network-manager-openvpn-gnome:
-   Installed: 1.1.93-1ubuntu1
-   Candidate: 1.1.93-1ubuntu1
-   Version table:
-  *** 1.1.93-1ubuntu1 500
- 500 http://pt.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
- 100 /var/lib/dpkg/status
+ Two broad areas -
+ 1) the UI could be messed up, and make it difficult or impossible to 
configure VPNs. Or,
  
- mm:~$ apt-cache policy openvpn
- openvpn:
-   Installed: 2.3.10-1ubuntu2
-   Candidate: 2.3.10-1ubuntu2
-   Version table:
-  *** 2.3.10-1ubuntu2 500
- 500 http://pt.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
- 100 /var/lib/dpkg/status
- 
- Regards,
- 
- Marco
+ 2) the establishment of a VPN could fail, both 
+ 2.a) with peers that push < 100 routes
+ 2.b) with peers that push > 100 routes

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Status: Incomplete => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Brian Murray]

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Status: In Progress => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Alberto Donato]

Can this please be fixed in yakkety too?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Mathieu Trudel-Lapierre]

Sponsored the SRU. This does not need a fix in zesty as the fix is
already applied there (via newer upstream release).

Adam Collard, please update the bug description to follow the SRU
procedures (https://wiki.ubuntu.com/StableReleaseUpdates#Procedure). You
will want to subscribe ~ubuntu-sru when the bug report description is
ready.

** Also affects: network-manager-openvpn (Ubuntu Zesty)
   Importance: Wishlist
   Status: Triaged

** Also affects: network-manager-openvpn (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Changed in: network-manager-openvpn (Ubuntu Zesty)
   Status: Triaged => Fix Released

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Importance: Undecided => Wishlist

** Changed in: network-manager-openvpn (Ubuntu Xenial)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1617098] Re: Add support for option max-routes

[Mathew Hodson]

** Changed in: network-manager-openvpn (Ubuntu)
   Status: Confirmed => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1617098

Title:
  Add support for option max-routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager-openvpn/+bug/1617098/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs