Re: Importing OpenVPN. ovpn file in Fedora 25

[Stephen Morris]

On 21/02/2017 16:13, Ed Greshko wrote:

On 02/21/17 12:43, Stephen Morris wrote:

Thanks Ed. After sending the email I went to that site and their site
has changed. I downloaded the .ovpn files their links were pointing at
for Singapore and Miami and imported them into Networkmanager which
set everything up, including pointing the CA Certificates entry at an
external location URL to get the certificate, which is a different
location for each server and is pointing at a .pem file. I found via
this method that their Australian servers still don't work and neither
does their Indian Server, and their Hong Kong server wants a pin in
order to connect.


Well, you certainly are seeing things different from what I'm seeing.

The openVPN config file for Singapore (gw1.sin1.slickvpn.com) contains

# host/port of vpn server
remote gw1.sin1.slickvpn.com 443 udp
# prompt for authentication
auth-user-pass
# equivalent to pull, tls-client
client
# redirect all outgoing traffic to the vpn gateway
redirect-gateway
# verify the server certificate for authenticity
remote-cert-tls server
cipher AES-256-CBC
proto udp
dev tun
keepalive 10 120
nobind
persist-key
persist-tun
# ssl certificate / key used for tls
#ca certs/ca.crt

-BEGIN CERTIFICATE-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-END CERTIFICATE-




I see no pointer towards an external URL.  The ca CERT is in the file
itself.  Also the Miami file contains the same CA.cert as does the file
SlickVPNcrt referenced in the Ubuntu setup.
Sorry Ed, I thought the first time I did the import it has 
http://gw1.sin1.slickvpn.com-ca.pen in the CA Certificates entry, but 
creating new entries no longer does that, so I'm not sure if there is 
different behaviour when the import function has never been used before 
to what happens when it has already been used once, as I can't reproduce it.


I was setting these definitions up under Gnome as I have found that if a 
definition is set up under KDE, with KDE storing the SSID password in 
Kwallet I think, when that definition is first used under Gnome I get 
prompted to re-enter the password before I can connect to my router. If 
he definition is created under Gnome it is usable under KDE without 
prompting. I am assuming this is because Gnome stores the password in 
the definition whereas KDE doesn't.


I also could see no difference in the Hong Kong, Miami, or Singapore
setups other than the name of the openVPN server.  Nothing to indicate a
PIN of any sort is needed.
Sorry Ed, my stupidity, I thought it was saying a pin was required but 
having retried the connection again now it is actually prompting for a 
password. I've checked the password I have in the definition and it is 
correct and the same as the password in the other connections that do work.


I'll re-talk to the vendor about these issues. I have already spoken to 
them once about not being able to use the Australian servers and just 
get the response to not use them because of the expensive cost of 
networking in Australia, so I am assuming at the moment that they have 
not been set up properly.


[egreshko@meimei ~]$ ll gw1.*
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 21 14:03 gw1.hkg2.slickvpn.com.ovpn
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 21 13:44 gw1.mia4.slickvpn.com.ovpn
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 20 15:50 gw1.sin1.slickvpn.com.ovpn

[egreshko@meimei ~]$ diff gw1.hkg2.slickvpn.com.ovpn
gw1.mia4.slickvpn.com.ovpn
2c2
< remote gw1.hkg2.slickvpn.com 443 udp
---

remote gw1.mia4.slickvpn.com 443 udp

[egreshko@meimei ~]$ diff gw1.mia4.slickvpn.com.ovpn
gw1.sin1.slickvpn.com.ovpn
2c2
< remote gw1.mia4.slickvpn.com 443 udp
---

remote gw1.sin1.slickvpn.com 443 udp


I wouldn't compare what is being done on the Windows side since they
seem to have their own client.

In any event, since you are their customer you may want to contact them
for support.
Sorry Ed, I was

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/21/17 12:43, Stephen Morris wrote:
> Thanks Ed. After sending the email I went to that site and their site
> has changed. I downloaded the .ovpn files their links were pointing at
> for Singapore and Miami and imported them into Networkmanager which
> set everything up, including pointing the CA Certificates entry at an
> external location URL to get the certificate, which is a different
> location for each server and is pointing at a .pem file. I found via
> this method that their Australian servers still don't work and neither
> does their Indian Server, and their Hong Kong server wants a pin in
> order to connect.


Well, you certainly are seeing things different from what I'm seeing.

The openVPN config file for Singapore (gw1.sin1.slickvpn.com) contains

# host/port of vpn server
remote gw1.sin1.slickvpn.com 443 udp
# prompt for authentication
auth-user-pass
# equivalent to pull, tls-client
client
# redirect all outgoing traffic to the vpn gateway
redirect-gateway
# verify the server certificate for authenticity
remote-cert-tls server
cipher AES-256-CBC
proto udp
dev tun
keepalive 10 120
nobind
persist-key
persist-tun
# ssl certificate / key used for tls
#ca certs/ca.crt

-BEGIN CERTIFICATE-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-END CERTIFICATE-


I see no pointer towards an external URL.  The ca CERT is in the file
itself.  Also the Miami file contains the same CA.cert as does the file
SlickVPNcrt referenced in the Ubuntu setup.

I also could see no difference in the Hong Kong, Miami, or Singapore
setups other than the name of the openVPN server.  Nothing to indicate a
PIN of any sort is needed.

[egreshko@meimei ~]$ ll gw1.*
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 21 14:03 gw1.hkg2.slickvpn.com.ovpn
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 21 13:44 gw1.mia4.slickvpn.com.ovpn
-rw-rw-r--. 1 egreshko egreshko 1634 Feb 20 15:50 gw1.sin1.slickvpn.com.ovpn

[egreshko@meimei ~]$ diff gw1.hkg2.slickvpn.com.ovpn
gw1.mia4.slickvpn.com.ovpn
2c2
< remote gw1.hkg2.slickvpn.com 443 udp
---
> remote gw1.mia4.slickvpn.com 443 udp

[egreshko@meimei ~]$ diff gw1.mia4.slickvpn.com.ovpn
gw1.sin1.slickvpn.com.ovpn
2c2
< remote gw1.mia4.slickvpn.com 443 udp
---
> remote gw1.sin1.slickvpn.com 443 udp


I wouldn't compare what is being done on the Windows side since they
seem to have their own client.

In any event, since you are their customer you may want to contact them
for support. 

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Stephen Morris]

On 20/02/2017 18:34, Ed Greshko wrote:

On 02/20/17 12:53, Stephen Morris wrote:

 I'm using the Slickvpn provider for my vpn, which also uses
Openvpn. Under windows they provide a client which make connecting to
any of their servers, and changing between servers, and auto switching
between servers, child's play.
 They don't provide a client for linux but instead their web site
provides a link to instructions on how to set up Openvpn under Linux,
but it is aimed directly at Ubuntu. In order to get the vpn to work I
had to download a crt file that was configured for their server in
Singapore (as being the closest location to me), but there was no
keyfile. When I downloaded the .crt file I stored that file in my
downloads directory, and then in the vpn definition in networkmanager
I pointed the 'CA Certificates' option to the .crt file in my
downloaded location. Given you comments above, is that not how I
should be setting things up?

I looked at the Slickvpn site

 From what I could tell, all you should need do is download the openVPN
file for each site you want to connect with from this page
https://www.slickvpn.com/locations/.  Then change the name of the file
from *.bin to *.ovpn and use the Import function of NetworkManager.
When prompted to save the certificates you should say yes.

After the connection is imported you would then go to the connection and
choose "Edit".  There you'd add your UN/PW and say OK.  After that you
should be able to connect.  Looking at the openVPN config file it is
using simple UN/PW authentication.   I don't see any requirements for
additional keys.

The Connection Type is show as Password.  This is different than my VPN
provider which has a Connection Type of Password with Certificates (TLS)
and the openVPN config supplied by them includes a CA, and User certs
plus a private key and tls_auth key.
Thanks Ed. After sending the email I went to that site and their site 
has changed. I downloaded the .ovpn files their links were pointing at 
for Singapore and Miami and imported them into Networkmanager which set 
everything up, including pointing the CA Certificates entry at an 
external location URL to get the certificate, which is a different 
location for each server and is pointing at a .pem file. I found via 
this method that their Australian servers still don't work and neither 
does their Indian Server, and their Hong Kong server wants a pin in 
order to connect. From their windows client they have servers that are 
Core Servers and one's that are not, and it seems to be difficult to 
connect to their servers which are not Core Servers. When using their 
Windows Client and pointing it at a definition that is a group of 
servers, its auto selection seems to only select Core Servers and fails 
if the list doesn't include a Core Server. Unfortunately their location 
site doesn't indicate which are Core Servers and which aren't, unless 
the links they provide are only for Core Servers, as I noticed from 
their map that Miami has two servers but they only provide a link to 
download the .ovpn file for one of them.




 As a side issue to this, which may be the provider I am using,
when I use the vpn my network performance goes through the floor. I
have spoken to the provider about it and they suggested I try a couple
of server in the US, but their performance is worse. I get the same
issue under both Linux and Windows. The provider recommends that I not
use their servers in Australia because network costs are so expensive.
Do you notice similar performance issues with your setup, and if not,
how do I identify whether it is a provider issue or my setup?

What I would do is go to a site such as http://www.speedtest.net and in
the settings menu pick a destination server at the same location as your
VPN end point.  Then I would run the speed test with and without being
connected to the VPN.  I would run each test multiple times and take an
average.  I did this with one of my endpoints in Seattle.  With the VPN
it was slower but only by about 5%.

It is not clear that their servers support it...but you can also try
turning LZO compression on in the "Advanced" settings for the
connection.  I see a slight increase in my speed tests with this turned
on.  YMMV depending on the type of data being transferred.
I've turned on LZO compression to see what happens. I'm on cable and 
I've found that speedtest.net tends to be a bit hit or miss as to 
whether it connects or not, plus my ISP recommends to not use it for 
cable speed tests. I tried a site called ozbroadband.com which test 
speed rating by downloading an image file of a user selected size, and 
if I'm not connecting via the vpn I am able to download a larger file 
than if I am connecting via vpn. I'm on a 100Mbps link and when I speed 
tested yesterday without the vpn I tested at a line speed of 80.52 Mbps, 
with the Singapore vpn connection it drops to 35.9 Mbps and with the 
Miami vpn connection it drops to 4.5 

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/20/17 12:53, Stephen Morris wrote:
> I'm using the Slickvpn provider for my vpn, which also uses
> Openvpn. Under windows they provide a client which make connecting to
> any of their servers, and changing between servers, and auto switching
> between servers, child's play.
> They don't provide a client for linux but instead their web site
> provides a link to instructions on how to set up Openvpn under Linux,
> but it is aimed directly at Ubuntu. In order to get the vpn to work I
> had to download a crt file that was configured for their server in
> Singapore (as being the closest location to me), but there was no
> keyfile. When I downloaded the .crt file I stored that file in my
> downloads directory, and then in the vpn definition in networkmanager
> I pointed the 'CA Certificates' option to the .crt file in my
> downloaded location. Given you comments above, is that not how I
> should be setting things up?

I looked at the Slickvpn site

From what I could tell, all you should need do is download the openVPN
file for each site you want to connect with from this page
https://www.slickvpn.com/locations/.  Then change the name of the file
from *.bin to *.ovpn and use the Import function of NetworkManager. 
When prompted to save the certificates you should say yes.

After the connection is imported you would then go to the connection and
choose "Edit".  There you'd add your UN/PW and say OK.  After that you
should be able to connect.  Looking at the openVPN config file it is
using simple UN/PW authentication.   I don't see any requirements for
additional keys.

The Connection Type is show as Password.  This is different than my VPN
provider which has a Connection Type of Password with Certificates (TLS)
and the openVPN config supplied by them includes a CA, and User certs
plus a private key and tls_auth key.


> As a side issue to this, which may be the provider I am using,
> when I use the vpn my network performance goes through the floor. I
> have spoken to the provider about it and they suggested I try a couple
> of server in the US, but their performance is worse. I get the same
> issue under both Linux and Windows. The provider recommends that I not
> use their servers in Australia because network costs are so expensive.
> Do you notice similar performance issues with your setup, and if not,
> how do I identify whether it is a provider issue or my setup?

What I would do is go to a site such as http://www.speedtest.net and in
the settings menu pick a destination server at the same location as your
VPN end point.  Then I would run the speed test with and without being
connected to the VPN.  I would run each test multiple times and take an
average.  I did this with one of my endpoints in Seattle.  With the VPN
it was slower but only by about 5%.

It is not clear that their servers support it...but you can also try
turning LZO compression on in the "Advanced" settings for the
connection.  I see a slight increase in my speed tests with this turned
on.  YMMV depending on the type of data being transferred.

 


-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Stephen Morris]

On 18/02/2017 15:34, Ed Greshko wrote:

On 02/18/17 13:23, Ed Greshko wrote:

It is more than likely that there is a problem with the config file.  As
I noted in the BZ your config file seems incomplete.

Actually, taking a closer look at the config file it seems it may be
complete.

The question I would have is, where have you placed
-fw-1-udp-34447-ca.crt and -fw-1-udp-34447-tls.key.

I have had problems when placing certs in non-standard locations as this
can result in selinux errors resulting in unsuccessful connections.

Hi Ed,
I'm using the Slickvpn provider for my vpn, which also uses 
Openvpn. Under windows they provide a client which make connecting to 
any of their servers, and changing between servers, and auto switching 
between servers, child's play.
They don't provide a client for linux but instead their web site 
provides a link to instructions on how to set up Openvpn under Linux, 
but it is aimed directly at Ubuntu. In order to get the vpn to work I 
had to download a crt file that was configured for their server in 
Singapore (as being the closest location to me), but there was no 
keyfile. When I downloaded the .crt file I stored that file in my 
downloads directory, and then in the vpn definition in networkmanager I 
pointed the 'CA Certificates' option to the .crt file in my downloaded 
location. Given you comments above, is that not how I should be setting 
things up?
As a side issue to this, which may be the provider I am using, when 
I use the vpn my network performance goes through the floor. I have 
spoken to the provider about it and they suggested I try a couple of 
server in the US, but their performance is worse. I get the same issue 
under both Linux and Windows. The provider recommends that I not use 
their servers in Australia because network costs are so expensive. Do 
you notice similar performance issues with your setup, and if not, how 
do I identify whether it is a provider issue or my setup?


regards,
Steve



___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[poma]

On 18.02.2017 16:37, InvalidPath wrote:
[...]
> Which is even more confusing because this config file works perfectly with
> the Windows OpenVPN client. So there must be some difference in how the
> clients use this file because teh certificate is valid.  I did goto the
> link in this error log and it's really not much help since the server
> certificate and actually the entire config was generated from pfSense.
> 


OpenVPN draft setup: pfSense and Fedora

Tested with:

= Server:
pfSense-kernel-pfSense-2.3.2
openvpn-2.3.11
openvpn-client-export-2.4
pfSense-pkg-openvpn-client-export-1.4.1

= Client:
kernel-4.9.10-1002.fc24.x86_64
openvpn-2.3.14-1.fc24.x86_64
NetworkManager-1.7.1-0.5.20170218git5ae3db7.fc24.x86_64
NetworkManager-openvpn-1.2.8-2.fc24.x86_64
NetworkManager-openvpn-gnome-1.2.8-2.fc24.x86_64
nm-connection-editor-1.4.5-0.5.20170217git854c4eb.fc24.x86_64
network-manager-applet-1.4.5-0.5.20170217git854c4eb.fc24.x86_64

~~

= Server
  OpenVPN / Client Export Utility
   Inline Configurations: Others

- Exported to:

pfSense-udp-1194-test-config.ovpn:
dev tun
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote  1194 udp
verify-x509-name "Server Certificate" name
auth-user-pass
ns-cert-type server


-BEGIN CERTIFICATE-
[...]
-END CERTIFICATE-


-BEGIN CERTIFICATE-
[...]
-END CERTIFICATE-


-BEGIN PRIVATE KEY-
[...]
-END PRIVATE KEY-



https:///status_logs.php?logfile=openvpn
"openvpn user 'test' authenticated"

~~

- Imported to:

= Client

/etc/NetworkManager/system-connections/pfSense-udp-1194-test-config:
[connection]
id=pfSense-udp-1194-test-config
uuid=
type=vpn
autoconnect=false
permissions=

[vpn]
auth=SHA1
ca=<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-ca.pem
cert=<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-cert.pem
cert-pass-flags=4
cipher=AES-256-CBC
connection-type=password-tls
dev=tun
dev-type=tun
key=<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-key.pem
ns-cert-type=server
password-flags=0
remote=:1194:udp
username=test
verify-x509-name=name:Server Certificate
service-type=org.freedesktop.NetworkManager.openvpn

[vpn-secrets]
password=

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
ip6-privacy=0
method=ignore

~~

  Network Connections / VPN - Edit
Export VPN connection...
- Exported to:

pfSense-udp-1194-test-config (openvpn).conf:
remote '' 1194 udp
ca '<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-ca.pem'
cert '<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-cert.pem'
key '<$HOME>/.cert/nm-openvpn/pfSense-udp-1194-test-config-key.pem'
auth-user-pass
cipher AES-256-CBC
dev tun
dev-type tun
proto udp
ns-cert-type server
verify-x509-name 'Server Certificate' name
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nm-openvpn
group nm-openvpn

~~

journalctl NetworkManager:
"device (tun0): Activation: successful, device activated."


Ref.
https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server

p.s.
For proper diagnosis, access to the logs on the server and the client are 
essential.
This is never superfluous to repeat.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Patrick O'Callaghan]

On Sun, 2017-02-19 at 22:15 +0800, Ed Greshko wrote:
> On 02/19/17 21:57, Patrick O'Callaghan wrote:
> > On Sat, 2017-02-18 at 16:32 -0700, InvalidPath wrote:
> > > Here's a long short but does anyone know how to move Gmails default reply
> > > to the bottom of a thread? I am unable to find the setting if it exists..
> > 
> > Select the text you want to quote (preferably not all of the message),
> > then hit Reply.
> > 
> > You can also remove the HTML formatting using Ctrl-\ (see the Tx menu
> > at the bottom of the message composer). IIRC there's also a way to set
> > this automatically.
> > 
> 
> When it comes to gmail and their web interface, things have changed and
> it would seem not for the better.
> 
> I rarely use the web interface but in checking just now to do what you
> suggest you seem to have to go to settings-->labs and enable "Quote
> selected text".

Could be. I probably enabled this so long ago I don't remember.

> I also don't find the Ctrl-\ working (It is late and I've had some Jack)
> but there is a little down pointing triangle in the compose window that
> when you hover over says "More Options" and when you click on it you get
> the option to send in "plain text".

I know mine sends in plain text by default. It's under 
Settings->General->Default text settings.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/19/17 21:57, Patrick O'Callaghan wrote:
> On Sat, 2017-02-18 at 16:32 -0700, InvalidPath wrote:
>> Here's a long short but does anyone know how to move Gmails default reply
>> to the bottom of a thread? I am unable to find the setting if it exists..
> Select the text you want to quote (preferably not all of the message),
> then hit Reply.
>
> You can also remove the HTML formatting using Ctrl-\ (see the Tx menu
> at the bottom of the message composer). IIRC there's also a way to set
> this automatically.
>

When it comes to gmail and their web interface, things have changed and
it would seem not for the better.

I rarely use the web interface but in checking just now to do what you
suggest you seem to have to go to settings-->labs and enable "Quote
selected text".

I also don't find the Ctrl-\ working (It is late and I've had some Jack)
but there is a little down pointing triangle in the compose window that
when you hover over says "More Options" and when you click on it you get
the option to send in "plain text".


-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Patrick O'Callaghan]

On Sat, 2017-02-18 at 19:41 -0700, InvalidPath wrote:
> Reading the guidelines, outside of the top posting, won't help this.  You
> are playing the assumption game thinking I'm like interactively quoting
> things when I am not.  I do not believe that I am the only person using
> Gmail here, do the rest of you guys click reply, then the there little dots
> to show the email body you are replying to.. then scroll to the bottom to
> then hit enter a few times to make space before you can even begin to type?

The Guidelines are not meant to be a tutorial on how you should set up
your specific mailer, but on what you should configure it to do. Ask
for help if necessary.

The above indented text is a quote from your message. All I did was
select it and hit Reply in my mailer. The formatting was applied by the
mailer automatically. This is the virtually universal way things are
done on technical mailing lists, so if as you say elsewhere you have 20
years experience in IT but don't know about it I'm frankly astonished.

You are certainly not the only person here using Gmail. I use it myself
frequently. For mailing lists I tend to prefer Evolution but if away
from my home system I'll use Gmail with no problem.

The "so many rules" complaint is bizarre. These Guidelines are
universal across all of the Fedora mailing lists, and are largely
adapted from similar guidelines that exist elsewhere, usually with
names like Netiquette or similar.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Patrick O'Callaghan]

On Sat, 2017-02-18 at 16:32 -0700, InvalidPath wrote:
> Here's a long short but does anyone know how to move Gmails default reply
> to the bottom of a thread? I am unable to find the setting if it exists..

Select the text you want to quote (preferably not all of the message),
then hit Reply.

You can also remove the HTML formatting using Ctrl-\ (see the Tx menu
at the bottom of the message composer). IIRC there's also a way to set
this automatically.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Joe Zeff]

On 02/18/2017 08:17 PM, InvalidPath wrote:

So what are you calling quoted text?  Quoted text that I/m used to is
actually quotes with " " marks.  Do you remove the persons sig?  Or do
you just remove the lines pre-pended with 

You accidentally put this both above and below the text.

Thunderbird, my email program, shows text quoted from the message I'm 
replying to with > at the beginning of each line.  However, on incoming 
messages, it has the text indented and a line running down the left side 
of the window, rather like a blockquote.  On most mailing lists I've 
been on, it's customary to remove any sig or boilerplate added by the 
list's software.  It's also considered polite to remove any text from 
the original message that's not relevant to your reply, to make it 
easier to find what it is you're talking about.  And, if you intersperse 
your reply with the original text, it's also good manners to remove any 
text that comes after your reply, so that readers can tell that there's 
no point wasting time looking at what remains.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

So what are you calling quoted text?  Quoted text that I/m used to is
actually quotes with " " marks.  Do you remove the persons sig?  You just
remove the lines pre-pended with 
>> I have never seen a mailing list with so many rules.  I realize pretty
>> much every one of you guys are on this list for help and to help others
>> out of a passion for Linux/Fedora and because you are nice people. I
>> have to say that my experience thus far has been lacking because a few
>> rule breakings that are apparently due to default software settings.
>> Settings that I would gladly change to be able to conform to the lists
>> standards, except I cannot get help.
>>
>
> So far, all I've seen is a polite request for you to follow the rules. And
> yes, when I use gmail, I do scroll down to the bottom to reply, and I do
> trim the quoted text because it only takes a few seconds and makes my
> replies so much easier to follow.  I'm on one mailing list where html is
> highly discouraged, and another where the mailing list software scrubs it,
> which is fine by me.  If you think that this mailing list has too many
> rules, you should take a look at Ubuntu's official forum where adding a
> post to a thread that asks for suggestions on a similar thread is
> considered "hijacking," and will get you, at the least, a rebuke from a
> moderator.


So what are you calling quoted text?  Quoted text that I/m used to is
actually quotes with " " marks.  Do you remove the persons sig?  Or do you
just remove the lines pre-pended with ___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/19/17 10:55, InvalidPath wrote:
> Anyway yeah it's our Firewall at work.. pf supplies the ovpn, the
> ca.crt and the .key file.  What I do not know if I am missing is the
> client cert.  I understand your position, Ive been in IT for 20 years
> so I can appreciate wanting to reproduce a problem to help resolve it.

I've got you beat by 20 years...  :-)

Too bad the Firewall is at your work.
>
> Let me ask..  could you generate an OpenVPN server on your ASUS with
> the same settings as ours? If so maybe there's a different format to
> the .ovpn for linux.  When you set yours up did the ASUS give you the
> option to create configs for the different OS's or is it one config to
> rule them all?
>
I've sent the config to your directly.  The settings are not exactly the
same since the certs are within the config.  But this should at least
confirm that you're following the Import procedure properly and things
are generally OK on your side.  And it may give you something to compare
with.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Joe Zeff]

On 02/18/2017 06:41 PM, InvalidPath wrote:

I have never seen a mailing list with so many rules.  I realize pretty
much every one of you guys are on this list for help and to help others
out of a passion for Linux/Fedora and because you are nice people. I
have to say that my experience thus far has been lacking because a few
rule breakings that are apparently due to default software settings.
Settings that I would gladly change to be able to conform to the lists
standards, except I cannot get help.


So far, all I've seen is a polite request for you to follow the rules. 
And yes, when I use gmail, I do scroll down to the bottom to reply, and 
I do trim the quoted text because it only takes a few seconds and makes 
my replies so much easier to follow.  I'm on one mailing list where html 
is highly discouraged, and another where the mailing list software 
scrubs it, which is fine by me.  If you think that this mailing list has 
too many rules, you should take a look at Ubuntu's official forum where 
adding a post to a thread that asks for suggestions on a similar thread 
is considered "hijacking," and will get you, at the least, a rebuke from 
a moderator.

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

On Sat, Feb 18, 2017 at 5:05 PM, Ed Greshko  wrote:

> On 02/19/17 07:14, InvalidPath wrote:
> > I think I did mention that this 'provider' is from the companies
> > pfSense firewall.  So there is no actual, like 3rd party provider or
> > anything.  And Windows works perfectly with this exact .ovpn..
>
> I seem to have missed your mention of pfSense.
>
> So, basically, you have a router/firewall from them that supplies an
> openVPN service.   My router, an ASUS, also does that.  It provides an
> openVPN config file and it imports and works just fine under Windows,
> Linux, iPhone, and Android.  It is suppose to work with MacOS but I
> can't test that.
>
> >
> > Not sure how I can provide you with an 'actual' test case other than
> > providing logs from a successful connection, however as stated that'd
> > be from Windows.  Not Linux.
> >
> > You are giving off a vibe that makes me think, that you think that Im
> > trying to waste your time.  I can assure you, I'm not because that' d
> > be wasting my own time as well and that is something I hate.  tell me
> > what other info would help this and I'll do my damndest to provide it.
> >
> I didn't intend to give you that impression.  I don't think you're
> trying to waste my time.  I was asking about a VPN Provider since it
> would have been my plan to join the service and apply for my own
> connection and get an account, ovpn file, and the certs needed to test
> for myself.
>
> What I am saying is that without a way for me to actually test what
> you're doing I don't think I can help you.  It would be a pure guessing
> game for me.  I prefer to recreate a difficult problem and then work to
> resolve it.
>
>
> --
> Fedora Users List - The place to go to get others to do the work for you
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>

Sorry Ed, I had a rough day and I probably percieved a tone in your reply
that was not there.  My apologies.  I did not think anyone would go to that
much trouble in order to help troubleshoot a VPN issue for a stranger.
Honestly :)

Anyway yeah it's our Firewall at work.. pf supplies the ovpn, the ca.crt
and the .key file.  What I do not know if I am missing is the client cert.
I understand your position, Ive been in IT for 20 years so I can appreciate
wanting to reproduce a problem to help resolve it.

Let me ask..  could you generate an OpenVPN server on your ASUS with the
same settings as ours? If so maybe there's a different format to the .ovpn
for linux.  When you set yours up did the ASUS give you the option to
create configs for the different OS's or is it one config to rule them all?
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

On Sat, Feb 18, 2017 at 4:09 PM, Patrick O'Callaghan 
wrote:

> On Sat, 2017-02-18 at 08:37 -0700, InvalidPath wrote:
> > Sorry Ed.. with the default being at the top for so many devices and apps
> > it didn't even cross my mind.
>
> I suggest you take a look at the list Guidelines, which ask people not
> to top-post, not to use HTML, and to quote selectively in their replies
> (and not the entire message as you seem to be doing). It's also usual
> to distinguish visually between the quoted material and the reply,
> normally by using the "> " prefix to quoted lines. See almost every
> other reply message on the list (including this one) for examples.
>
> poc
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>


Reading the guidelines, outside of the top posting, won't help this.  You
are playing the assumption game thinking I'm like interactively quoting
things when I am not.  I do not believe that I am the only person using
Gmail here, do the rest of you guys click reply, then the there little dots
to show the email body you are replying to.. then scroll to the bottom to
then hit enter a few times to make space before you can even begin to type?

I have never seen a mailing list with so many rules.  I realize pretty much
every one of you guys are on this list for help and to help others out of a
passion for Linux/Fedora and because you are nice people. I have to say
that my experience thus far has been lacking because a few rule breakings
that are apparently due to default software settings.  Settings that I
would gladly change to be able to conform to the lists standards, except I
cannot get help.

Which not that I look you yourself are using Gmail! Poc do you have to do a
lot of manual changes before each and every email you send to this list?
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/19/17 07:14, InvalidPath wrote:
> I think I did mention that this 'provider' is from the companies
> pfSense firewall.  So there is no actual, like 3rd party provider or
> anything.  And Windows works perfectly with this exact .ovpn..

I seem to have missed your mention of pfSense. 

So, basically, you have a router/firewall from them that supplies an
openVPN service.   My router, an ASUS, also does that.  It provides an
openVPN config file and it imports and works just fine under Windows,
Linux, iPhone, and Android.  It is suppose to work with MacOS but I
can't test that.

>
> Not sure how I can provide you with an 'actual' test case other than
> providing logs from a successful connection, however as stated that'd
> be from Windows.  Not Linux.
>
> You are giving off a vibe that makes me think, that you think that Im
> trying to waste your time.  I can assure you, I'm not because that' d
> be wasting my own time as well and that is something I hate.  tell me
> what other info would help this and I'll do my damndest to provide it.
>
I didn't intend to give you that impression.  I don't think you're
trying to waste my time.  I was asking about a VPN Provider since it
would have been my plan to join the service and apply for my own
connection and get an account, ovpn file, and the certs needed to test
for myself.

What I am saying is that without a way for me to actually test what
you're doing I don't think I can help you.  It would be a pure guessing
game for me.  I prefer to recreate a difficult problem and then work to
resolve it. 


-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Here's a long short but does anyone know how to move Gmails default reply
to the bottom of a thread? I am unable to find the setting if it exists..

On Sat, Feb 18, 2017 at 4:14 PM, InvalidPath  wrote:

> I think I did mention that this 'provider' is from the companies pfSense
> firewall.  So there is no actual, like 3rd party provider or anything.  And
> Windows works perfectly with this exact .ovpn..
>
> Not sure how I can provide you with an 'actual' test case other than
> providing logs from a successful connection, however as stated that'd be
> from Windows.  Not Linux.
>
> You are giving off a vibe that makes me think, that you think that Im
> trying to waste your time.  I can assure you, I'm not because that' d be
> wasting my own time as well and that is something I hate.  tell me what
> other info would help this and I'll do my damndest to provide it.
>
> On Sat, Feb 18, 2017 at 2:05 PM, Ed Greshko 
> wrote:
>
>> On 02/18/17 23:37, InvalidPath wrote:
>>
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: VERIFY ERROR:
>> > depth=0, error=certificate signature failure: C=US, ST=MT,
>> > O=$organization, OU=Operations, CN=-v
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: OpenSSL:
>> > error:14090086:SSL routines:ssl3_get_server_certificate:certificate
>> > verify failed
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS_ERROR: BIO
>> > read tls_read_plaintext error
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
>> > object -> incoming plaintext read error
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
>> > handshake failed
>> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]:
>> > SIGUSR1[soft,tls-error] received, process restarting
>> >
>> > Which is even more confusing because this config file works perfectly
>> > with the Windows OpenVPN client. So there must be some difference in
>> > how the clients use this file because teh certificate is valid.  I did
>> > goto the link in this error log and it's really not much help since
>> > the server certificate and actually the entire config was generated
>> > from pfSense.
>>
>>
>> This does appear to be the root of the problem.   That is, problem with
>> the certs.
>>
>> Sorry, without knowing who the VPN Provider is and without having an
>> actual test case with real information to work with it would just be a
>> guessing game for me.   I'm not particularly fond of guessing games.
>>
>> --
>> Fedora Users List - The place to go to get others to do the work for you
>> ___
>> users mailing list -- users@lists.fedoraproject.org
>> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>>
>
>
Here's a long short but does anyone know how to move Gmails default reply
to the bottom of a thread? I am unable to find the setting if it exists.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

I think I did mention that this 'provider' is from the companies pfSense
firewall.  So there is no actual, like 3rd party provider or anything.  And
Windows works perfectly with this exact .ovpn..

Not sure how I can provide you with an 'actual' test case other than
providing logs from a successful connection, however as stated that'd be
from Windows.  Not Linux.

You are giving off a vibe that makes me think, that you think that Im
trying to waste your time.  I can assure you, I'm not because that' d be
wasting my own time as well and that is something I hate.  tell me what
other info would help this and I'll do my damndest to provide it.

On Sat, Feb 18, 2017 at 2:05 PM, Ed Greshko  wrote:

> On 02/18/17 23:37, InvalidPath wrote:
>
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: VERIFY ERROR:
> > depth=0, error=certificate signature failure: C=US, ST=MT,
> > O=$organization, OU=Operations, CN=-v
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: OpenSSL:
> > error:14090086:SSL routines:ssl3_get_server_certificate:certificate
> > verify failed
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS_ERROR: BIO
> > read tls_read_plaintext error
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> > object -> incoming plaintext read error
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> > handshake failed
> > Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]:
> > SIGUSR1[soft,tls-error] received, process restarting
> >
> > Which is even more confusing because this config file works perfectly
> > with the Windows OpenVPN client. So there must be some difference in
> > how the clients use this file because teh certificate is valid.  I did
> > goto the link in this error log and it's really not much help since
> > the server certificate and actually the entire config was generated
> > from pfSense.
>
>
> This does appear to be the root of the problem.   That is, problem with
> the certs.
>
> Sorry, without knowing who the VPN Provider is and without having an
> actual test case with real information to work with it would just be a
> guessing game for me.   I'm not particularly fond of guessing games.
>
> --
> Fedora Users List - The place to go to get others to do the work for you
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Patrick O'Callaghan]

On Sat, 2017-02-18 at 08:37 -0700, InvalidPath wrote:
> Sorry Ed.. with the default being at the top for so many devices and apps
> it didn't even cross my mind.

I suggest you take a look at the list Guidelines, which ask people not
to top-post, not to use HTML, and to quote selectively in their replies
(and not the entire message as you seem to be doing). It's also usual
to distinguish visually between the quoted material and the reply,
normally by using the "> " prefix to quoted lines. See almost every
other reply message on the list (including this one) for examples.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/18/17 23:37, InvalidPath wrote:

> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: VERIFY ERROR:
> depth=0, error=certificate signature failure: C=US, ST=MT,
> O=$organization, OU=Operations, CN=-v
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: OpenSSL:
> error:14090086:SSL routines:ssl3_get_server_certificate:certificate
> verify failed
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS_ERROR: BIO
> read tls_read_plaintext error
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> object -> incoming plaintext read error
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]: TLS Error: TLS
> handshake failed
> Feb 18 08:32:16 localhost.localdomain nm-openvpn[7769]:
> SIGUSR1[soft,tls-error] received, process restarting
>
> Which is even more confusing because this config file works perfectly
> with the Windows OpenVPN client. So there must be some difference in
> how the clients use this file because teh certificate is valid.  I did
> goto the link in this error log and it's really not much help since
> the server certificate and actually the entire config was generated
> from pfSense.


This does appear to be the root of the problem.   That is, problem with
the certs.

Sorry, without knowing who the VPN Provider is and without having an
actual test case with real information to work with it would just be a
guessing game for me.   I'm not particularly fond of guessing games.  

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

On Feb 18, 2017 3:03 AM, "Ed Greshko"  wrote:

On 02/18/17 14:38, InvalidPath wrote:
> Well thats just it.. on linux IDK where the correct location is.  I
> tried placing it and the ca.crt in the same folder, then specifying
> the entire path in the .ovpn and both times the gui prompted me, do I
> want to copy them to /home/user/etc/etc and I chose yes.  But the
> connection times out in either case.


First of all  Many people on this list, myself included, would
appreciate it if you'd put your responses below the text is the reply.
It makes for easier reading

With Networkmanager it is best to put them under their own directory
under...

~/.local/share/networkmanagement/certificates

For example.

[egreshko@meimei certificates]$ pwd
/home/egreshko/.local/share/networkmanagement/certificates

[egreshko@meimei certificates]$ ls
AU-Sydney-S1   US-Los-Angeles-S3US-San-Jose-S1
US-Kansas-City-S1  US-New-York-City-S1  US-Seattle-S1

Showing I have 6 connections defined.

[egreshko@meimei certificates]$ ls -Z US-Kansas-City-S1
unconfined_u:object_r:home_cert_t:s0 ca.crt
unconfined_u:object_r:home_cert_t:s0 cert.crt
unconfined_u:object_r:home_cert_t:s0 private.key
unconfined_u:object_r:home_cert_t:s0 tls_auth.key

Shows the key files for that one connection and their selinux contents.

Do Not "move" the cert files to their new locations but copy them.  If
you move them they will not have the selinux context and you'll have to
take a second step to restore the context.

Then, when you try connecting you should check the journal (using
journalctl) to see if the connection is made and/or if there are any errors.

A successful connection would look like something similar to this

[egreshko@meimei ~]$ cat openvpn
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: OpenVPN 2.3.14
x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH]
[IPv6] built on Dec  7 2016
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: library versions:
OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.08
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: WARNING: No server
certificate verification method has been enabled.  See
http://openvpn.net/howto.html#mitm for more info.
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: NOTE: the current
--script-security setting may allow this configuration to call
user-defined scripts
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: Control Channel
Authentication: using
'/home/egreshko/.local/share/networkmanagement/certificates/
US-Seattle-S1/tls_auth.key'
as a OpenVPN static key file
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: NOTE: UID/GID
downgrade will be delayed because of --client, --pull, or --up-delay
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: UDPv4 link local:
[undef]
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: UDPv4 link remote:
[AF_INET]69.4.227.18:53
Feb 18 17:04:00 meimei.greshko.com nm-openvpn[32673]: [isvpn.net] Peer
Connection Initiated with [AF_INET]69.4.227.18:53
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:2:
topology-subnet (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
option 'mssfix' cannot be used in this context ([PUSH-OPTIONS])
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6:
dhcp-pre-release (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:7:
dhcp-renew (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:8:
dhcp-release (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:14:
register-dns (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:15:
block-ipv6 (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: TUN/TAP device
tun0 opened
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]:
/usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 32667
--bus-name org.freedesktop.NetworkManager.openvpn.Connection_9 --tun --
tun0 1500 1570 25.0.8.4 255.255.255.0 init
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: GID set to nm-openvpn
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: UID set to nm-openvpn
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: Initialization
Sequence Completed
Feb 18 17:04:12 meimei.greshko.com nm-openvpn[32673]: SIGTERM received,
sending exit notification to peer
Feb 18 17:04:13 meimei.greshko.com nm-openvpn[32673]:
SIGTERM[soft,exit-with-notification] received, process exiting



--
Fedora Users List - The place to go to get others to do the work for you
___
users mailin

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/18/17 14:38, InvalidPath wrote:
> Well thats just it.. on linux IDK where the correct location is.  I
> tried placing it and the ca.crt in the same folder, then specifying
> the entire path in the .ovpn and both times the gui prompted me, do I
> want to copy them to /home/user/etc/etc and I chose yes.  But the
> connection times out in either case.


First of all  Many people on this list, myself included, would
appreciate it if you'd put your responses below the text is the reply. 
It makes for easier reading

With Networkmanager it is best to put them under their own directory
under...

~/.local/share/networkmanagement/certificates

For example.

[egreshko@meimei certificates]$ pwd
/home/egreshko/.local/share/networkmanagement/certificates

[egreshko@meimei certificates]$ ls
AU-Sydney-S1   US-Los-Angeles-S3US-San-Jose-S1
US-Kansas-City-S1  US-New-York-City-S1  US-Seattle-S1

Showing I have 6 connections defined.

[egreshko@meimei certificates]$ ls -Z US-Kansas-City-S1
unconfined_u:object_r:home_cert_t:s0 ca.crt
unconfined_u:object_r:home_cert_t:s0 cert.crt
unconfined_u:object_r:home_cert_t:s0 private.key
unconfined_u:object_r:home_cert_t:s0 tls_auth.key

Shows the key files for that one connection and their selinux contents.

Do Not "move" the cert files to their new locations but copy them.  If
you move them they will not have the selinux context and you'll have to
take a second step to restore the context.

Then, when you try connecting you should check the journal (using
journalctl) to see if the connection is made and/or if there are any errors.

A successful connection would look like something similar to this

[egreshko@meimei ~]$ cat openvpn
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: OpenVPN 2.3.14
x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH]
[IPv6] built on Dec  7 2016
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: library versions:
OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.08
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: WARNING: No server
certificate verification method has been enabled.  See
http://openvpn.net/howto.html#mitm for more info.
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: NOTE: the current
--script-security setting may allow this configuration to call
user-defined scripts
Feb 18 17:03:56 meimei.greshko.com nm-openvpn[32673]: Control Channel
Authentication: using
'/home/egreshko/.local/share/networkmanagement/certificates/US-Seattle-S1/tls_auth.key'
as a OpenVPN static key file
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: NOTE: UID/GID
downgrade will be delayed because of --client, --pull, or --up-delay
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: UDPv4 link local:
[undef]
Feb 18 17:03:57 meimei.greshko.com nm-openvpn[32673]: UDPv4 link remote:
[AF_INET]69.4.227.18:53
Feb 18 17:04:00 meimei.greshko.com nm-openvpn[32673]: [isvpn.net] Peer
Connection Initiated with [AF_INET]69.4.227.18:53
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:2:
topology-subnet (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
option 'mssfix' cannot be used in this context ([PUSH-OPTIONS])
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6:
dhcp-pre-release (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:7:
dhcp-renew (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:8:
dhcp-release (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:14:
register-dns (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: Options error:
Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:15:
block-ipv6 (2.3.14)
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]: TUN/TAP device
tun0 opened
Feb 18 17:04:02 meimei.greshko.com nm-openvpn[32673]:
/usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 32667
--bus-name org.freedesktop.NetworkManager.openvpn.Connection_9 --tun --
tun0 1500 1570 25.0.8.4 255.255.255.0 init
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: GID set to nm-openvpn
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: UID set to nm-openvpn
Feb 18 17:04:07 meimei.greshko.com nm-openvpn[32673]: Initialization
Sequence Completed
Feb 18 17:04:12 meimei.greshko.com nm-openvpn[32673]: SIGTERM received,
sending exit notification to peer
Feb 18 17:04:13 meimei.greshko.com nm-openvpn[32673]:
SIGTERM[soft,exit-with-notification] received, process exiting



-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To uns

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Well thats just it.. on linux IDK where the correct location is.  I tried
placing it and the ca.crt in the same folder, then specifying the entire
path in the .ovpn and both times the gui prompted me, do I want to copy
them to /home/user/etc/etc and I chose yes.  But the connection times out
in either case.

On Fri, Feb 17, 2017 at 10:34 PM, Ed Greshko  wrote:

> On 02/18/17 13:23, Ed Greshko wrote:
> > It is more than likely that there is a problem with the config file.  As
> > I noted in the BZ your config file seems incomplete.
>
> Actually, taking a closer look at the config file it seems it may be
> complete.
>
> The question I would have is, where have you placed
> -fw-1-udp-34447-ca.crt and -fw-1-udp-34447-tls.key.
>
> I have had problems when placing certs in non-standard locations as this
> can result in selinux errors resulting in unsuccessful connections.
>
> --
> Fedora Users List - The place to go to get others to do the work for you
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/18/17 13:23, Ed Greshko wrote:
> It is more than likely that there is a problem with the config file.  As
> I noted in the BZ your config file seems incomplete. 

Actually, taking a closer look at the config file it seems it may be
complete.

The question I would have is, where have you placed
-fw-1-udp-34447-ca.crt and -fw-1-udp-34447-tls.key.

I have had problems when placing certs in non-standard locations as this
can result in selinux errors resulting in unsuccessful connections.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/18/17 12:52, InvalidPath wrote:
> Thanks Ed but let me ask.. is this the proper way to ask questions
> rather than reporting issues, errors or potential bugs?
>
Well, your problem turn out to not be a bug. 

So, writing a bugzilla that ends up not being an actual bug is not a
good idea.  It can take time away from fixing actual bugs.  It also goes
to smaller group of people. 

The importing of openVPN configurations is known to work.  As I've said,
I have mine from IronSocket and everything works fine.  You are now able
to import your configuration file, but you're having trouble.

It is more than likely that there is a problem with the config file.  As
I noted in the BZ your config file seems incomplete.  More information
is needed from you to help determine if there is an actual bug and not a
usage problem.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Thanks Ed but let me ask.. is this the proper way to ask questions rather
than reporting issues, errors or potential bugs?

On Fri, Feb 17, 2017 at 7:08 PM, Ed Greshko  wrote:

> On 02/16/17 22:13, InvalidPath wrote:
> > Done, file uploaded.
> >
> > On Wed, Feb 15, 2017 at 10:14 PM, poma  > > wrote:
> >
> > On 15.02.2017 00:10, Ed Greshko wrote:
> > [...]
> > > I have, instead, filed this
> > > https://bugzilla.redhat.com/show_bug.cgi?id=1422273
> > 
> > >
> >
>
> OK
>
> You should close that BZ.  The problem you reported was due to your not
> having plasma-nm-openvpn installed.
>
> You seem to have other problems.  But they are unrelated to the
> importing issue.  So, if you need more assistance you can ask here.  I
> would suggest, however, you provide details about your VPN provider.
> I've encountered a few that issue somewhat non-standard ovpn configs and
> they don't import well.
>
> --
> Fedora Users List - The place to go to get others to do the work for you
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/16/17 22:13, InvalidPath wrote:
> Done, file uploaded.
>
> On Wed, Feb 15, 2017 at 10:14 PM, poma  > wrote:
>
> On 15.02.2017 00:10, Ed Greshko wrote:
> [...]
> > I have, instead, filed this
> > https://bugzilla.redhat.com/show_bug.cgi?id=1422273
> 
> >
>

OK

You should close that BZ.  The problem you reported was due to your not
having plasma-nm-openvpn installed.

You seem to have other problems.  But they are unrelated to the
importing issue.  So, if you need more assistance you can ask here.  I
would suggest, however, you provide details about your VPN provider. 
I've encountered a few that issue somewhat non-standard ovpn configs and
they don't import well.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/16/17 22:13, InvalidPath wrote:
> Done, file uploaded.


That is a *very* incomplete .ovpn file.

Please have a look at the file I'd uploaded with
https://bugzilla.redhat.com/show_bug.cgi?id=1422273.

Yours is missing any of the certs that should be included.

If anything, the Import function really should have returned an error
message.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Done, file uploaded.

On Wed, Feb 15, 2017 at 10:14 PM, poma  wrote:

> On 15.02.2017 00:10, Ed Greshko wrote:
> [...]
> > I have, instead, filed this
> > https://bugzilla.redhat.com/show_bug.cgi?id=1422273
> >
>
> Allows opening homologous configuration files with any extension or no
> extension.
> Configuration files should be contextually conformant, not by file
> extension.
>
> Test build can be found here:
> http://goo.gl/Gm4ffO
> nm-openvpn-ext/
>
> $ md5sum NetworkManager-openvpn-*.rpm
> aecefba4673190b0de98ed285f3ea052  NetworkManager-openvpn-1.2.8-
> 2.fc24.src.rpm
> 035a3043dab23f9ee2d7aa71ee548cb8  NetworkManager-openvpn-1.2.8-
> 2.fc24.x86_64.rpm
> ec208dc6744a8e4b0e508a3f1c71966a  NetworkManager-openvpn-gnome-
> 1.2.8-2.fc24.x86_64.rpm
>
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/16/17 14:54, InvalidPath wrote:
> Ok so tonight I reproduced it.  
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1422763
>
>

It seems like you are saying the file does have a .ovpn extension.   So,
it would seem the issue you are seeing is different than the one I observed.

If that is the case, then it may be helpful if you could upload the
failing file to the bugzilla.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Ok so tonight I reproduced it.

https://bugzilla.redhat.com/show_bug.cgi?id=1422763



On Tue, Feb 14, 2017 at 8:50 AM, poma  wrote:

> On 14.02.2017 13:10, Patrick O'Callaghan wrote:
> > On Tue, 2017-02-14 at 14:13 +0800, Ed Greshko wrote:
> >> On 02/14/17 13:42, InvalidPath wrote:
> >>> Has anyone had luck importing their .ovpn file into Network Manager?
> >>> When I do it, the dialog box disappears and I'm left staring at the
> >>> network list (wifi, eth0, br0, etc) with no new VPN connection
> >>> listed.  No errors or anything.
> >>
> >>
> >> Yes.  My VPN provider is ironsocket.com.  I am running F25 and KDE.  To
> >> check, I just now downloaded the ovpn file for a new connection.  It
> >> loaded and installed and connected just fine.
> >
> > I use ExpressVPN, and from the command line it works both with the
> > supplied executable and using "openvpn --config .opvn". However
> > although the NM widget loads the ovpn file without complaint, and I add
> > the user/pw information in the appropriate boxes, it refuses to
> > connect. No biggie as I can keep using the Shell version, but I think
> > the NM GUI leaves a lot to be desired unless you know exactly what
> > you're doing.
> >
> > poc
> >
>
> Would you mind report an issue at
> https://mail.gnome.org/mailman/listinfo/networkmanager-list
>
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[poma]

On 15.02.2017 00:10, Ed Greshko wrote:
[...]
> I have, instead, filed this
> https://bugzilla.redhat.com/show_bug.cgi?id=1422273
> 

Allows opening homologous configuration files with any extension or no 
extension.
Configuration files should be contextually conformant, not by file extension.

Test build can be found here:
http://goo.gl/Gm4ffO
nm-openvpn-ext/

$ md5sum NetworkManager-openvpn-*.rpm
aecefba4673190b0de98ed285f3ea052  NetworkManager-openvpn-1.2.8-2.fc24.src.rpm
035a3043dab23f9ee2d7aa71ee548cb8  NetworkManager-openvpn-1.2.8-2.fc24.x86_64.rpm
ec208dc6744a8e4b0e508a3f1c71966a  
NetworkManager-openvpn-gnome-1.2.8-2.fc24.x86_64.rpm

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/15/17 00:22, poma wrote:
> On 14.02.2017 07:19, Ed Greshko wrote:
>> On 02/14/17 13:42, InvalidPath wrote:
>>> Has anyone had luck importing their .ovpn file into Network Manager? 
>>> When I do it, the dialog box disappears and I'm left staring at the
>>> network list (wifi, eth0, br0, etc) with no new VPN connection
>>> listed.  No errors or anything.
>>
>> On a second try I found one thing that may be tripping you up.
>>
>> If I download the file from ironsocket it originally has a .bin suffix. 
>> If I don't rename the file to a .ovpn file I run into the same situation
>> you describe.
>>
> NetworkManager should look into the file, not taking into account the file 
> extension.
> If this sounds logical, would you mind report an issue at
> https://mail.gnome.org/mailman/listinfo/networkmanager-list

I have no desire to join another mailing list.

I have, instead, filed this
https://bugzilla.redhat.com/show_bug.cgi?id=1422273

If you are a member of that mailing list, feel free to inform them of
this BZ.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Oh no, not successful yet. I dual boot so i cant try much while at work.
Im.off tomorrow so my plan is to try tonight again.

On Feb 14, 2017 3:49 PM, "Ed Greshko"  wrote:

> On 02/15/17 01:27, InvalidPath wrote:
> > Sure but does it matter that I'm using KDE Plasma? Or is NM a Gnome
> thing?
>
> NM is used in all cases of desktops.  KDE and GNOME, however, use
> different widgets to frontend NM and while it should not make a
> difference the operative word is "should".
>
> Have you now been successful?  You say you're new to this list.  So, I'm
> just informing you it is standard practice to report success so others
> don't continue to try and resolve the issue.
>
>
> >
> > On Tue, Feb 14, 2017 at 9:22 AM, poma  > > wrote:
> >
> > On 14.02.2017 07:19, Ed Greshko wrote:
> > > On 02/14/17 13:42, InvalidPath wrote:
> > >> Has anyone had luck importing their .ovpn file into Network
> > Manager?
> > >> When I do it, the dialog box disappears and I'm left staring at
> the
> > >> network list (wifi, eth0, br0, etc) with no new VPN connection
> > >> listed.  No errors or anything.
> > >
> > >
> > > On a second try I found one thing that may be tripping you up.
> > >
> > > If I download the file from ironsocket it originally has a .bin
> > suffix.
> > > If I don't rename the file to a .ovpn file I run into the same
> > situation
> > > you describe.
> > >
> >
> > NetworkManager should look into the file, not taking into account
> > the file extension.
> > If this sounds logical, would you mind report an issue at
> > https://mail.gnome.org/mailman/listinfo/networkmanager-list
> > 
> > ___
> > users mailing list -- users@lists.fedoraproject.org
> > 
> > To unsubscribe send an email to
> > users-le...@lists.fedoraproject.org
> > 
> >
> >
> >
> >
> > ___
> > users mailing list -- users@lists.fedoraproject.org
> > To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
>
> --
> Fedora Users List - The place to go to get others to do the work for you
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/15/17 01:27, InvalidPath wrote:
> Sure but does it matter that I'm using KDE Plasma? Or is NM a Gnome thing?

NM is used in all cases of desktops.  KDE and GNOME, however, use
different widgets to frontend NM and while it should not make a
difference the operative word is "should".

Have you now been successful?  You say you're new to this list.  So, I'm
just informing you it is standard practice to report success so others
don't continue to try and resolve the issue.


>
> On Tue, Feb 14, 2017 at 9:22 AM, poma  > wrote:
>
> On 14.02.2017 07:19, Ed Greshko wrote:
> > On 02/14/17 13:42, InvalidPath wrote:
> >> Has anyone had luck importing their .ovpn file into Network
> Manager?
> >> When I do it, the dialog box disappears and I'm left staring at the
> >> network list (wifi, eth0, br0, etc) with no new VPN connection
> >> listed.  No errors or anything.
> >
> >
> > On a second try I found one thing that may be tripping you up.
> >
> > If I download the file from ironsocket it originally has a .bin
> suffix.
> > If I don't rename the file to a .ovpn file I run into the same
> situation
> > you describe.
> >
>
> NetworkManager should look into the file, not taking into account
> the file extension.
> If this sounds logical, would you mind report an issue at
> https://mail.gnome.org/mailman/listinfo/networkmanager-list
> 
> ___
> users mailing list -- users@lists.fedoraproject.org
> 
> To unsubscribe send an email to
> users-le...@lists.fedoraproject.org
> 
>
>
>
>
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org


-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[poma]

On 14.02.2017 18:27, InvalidPath wrote:
> Sure but does it matter that I'm using KDE Plasma? Or is NM a Gnome thing?
> 

If anyone can help you, not only in this particular case, but generally related 
to network issues, then fellows are there.
Now go by RighteousPath.

> On Tue, Feb 14, 2017 at 9:22 AM, poma  wrote:
> 
>> On 14.02.2017 07:19, Ed Greshko wrote:
>>> On 02/14/17 13:42, InvalidPath wrote:
 Has anyone had luck importing their .ovpn file into Network Manager?
 When I do it, the dialog box disappears and I'm left staring at the
 network list (wifi, eth0, br0, etc) with no new VPN connection
 listed.  No errors or anything.
>>>
>>>
>>> On a second try I found one thing that may be tripping you up.
>>>
>>> If I download the file from ironsocket it originally has a .bin suffix.
>>> If I don't rename the file to a .ovpn file I run into the same situation
>>> you describe.
>>>
>>
>> NetworkManager should look into the file, not taking into account the file
>> extension.
>> If this sounds logical, would you mind report an issue at
>> https://mail.gnome.org/mailman/listinfo/networkmanager-list
>> ___
>> users mailing list -- users@lists.fedoraproject.org
>> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>>
> 
> 
> 
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
> 
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[InvalidPath]

Sure but does it matter that I'm using KDE Plasma? Or is NM a Gnome thing?

On Tue, Feb 14, 2017 at 9:22 AM, poma  wrote:

> On 14.02.2017 07:19, Ed Greshko wrote:
> > On 02/14/17 13:42, InvalidPath wrote:
> >> Has anyone had luck importing their .ovpn file into Network Manager?
> >> When I do it, the dialog box disappears and I'm left staring at the
> >> network list (wifi, eth0, br0, etc) with no new VPN connection
> >> listed.  No errors or anything.
> >
> >
> > On a second try I found one thing that may be tripping you up.
> >
> > If I download the file from ironsocket it originally has a .bin suffix.
> > If I don't rename the file to a .ovpn file I run into the same situation
> > you describe.
> >
>
> NetworkManager should look into the file, not taking into account the file
> extension.
> If this sounds logical, would you mind report an issue at
> https://mail.gnome.org/mailman/listinfo/networkmanager-list
> ___
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[poma]

On 14.02.2017 07:19, Ed Greshko wrote:
> On 02/14/17 13:42, InvalidPath wrote:
>> Has anyone had luck importing their .ovpn file into Network Manager? 
>> When I do it, the dialog box disappears and I'm left staring at the
>> network list (wifi, eth0, br0, etc) with no new VPN connection
>> listed.  No errors or anything.
> 
> 
> On a second try I found one thing that may be tripping you up.
> 
> If I download the file from ironsocket it originally has a .bin suffix. 
> If I don't rename the file to a .ovpn file I run into the same situation
> you describe.
> 

NetworkManager should look into the file, not taking into account the file 
extension.
If this sounds logical, would you mind report an issue at
https://mail.gnome.org/mailman/listinfo/networkmanager-list
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[poma]

On 14.02.2017 13:10, Patrick O'Callaghan wrote:
> On Tue, 2017-02-14 at 14:13 +0800, Ed Greshko wrote:
>> On 02/14/17 13:42, InvalidPath wrote:
>>> Has anyone had luck importing their .ovpn file into Network Manager? 
>>> When I do it, the dialog box disappears and I'm left staring at the
>>> network list (wifi, eth0, br0, etc) with no new VPN connection
>>> listed.  No errors or anything.
>>
>>
>> Yes.  My VPN provider is ironsocket.com.  I am running F25 and KDE.  To
>> check, I just now downloaded the ovpn file for a new connection.  It
>> loaded and installed and connected just fine.
> 
> I use ExpressVPN, and from the command line it works both with the
> supplied executable and using "openvpn --config .opvn". However
> although the NM widget loads the ovpn file without complaint, and I add
> the user/pw information in the appropriate boxes, it refuses to
> connect. No biggie as I can keep using the Shell version, but I think
> the NM GUI leaves a lot to be desired unless you know exactly what
> you're doing.
> 
> poc
> 

Would you mind report an issue at
https://mail.gnome.org/mailman/listinfo/networkmanager-list

___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/14/17 20:10, Patrick O'Callaghan wrote:
> I use ExpressVPN, and from the command line it works both with the
> supplied executable and using "openvpn --config .opvn". However
> although the NM widget loads the ovpn file without complaint, and I add
> the user/pw information in the appropriate boxes, it refuses to
> connect. No biggie as I can keep using the Shell version, but I think
> the NM GUI leaves a lot to be desired unless you know exactly what
> you're doing.


FWIW, the only time I've had the GUI fail was when I told it to store
the certs in a non-standard location such that they didn't get the
proper selinux context.  I didn't get the selinux popup since
"Dontaudit" was in effect.  Things just didn't work and I took a while
for me to catch my mistake.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Patrick O'Callaghan]

On Tue, 2017-02-14 at 14:13 +0800, Ed Greshko wrote:
> On 02/14/17 13:42, InvalidPath wrote:
> > Has anyone had luck importing their .ovpn file into Network Manager? 
> > When I do it, the dialog box disappears and I'm left staring at the
> > network list (wifi, eth0, br0, etc) with no new VPN connection
> > listed.  No errors or anything.
> 
> 
> Yes.  My VPN provider is ironsocket.com.  I am running F25 and KDE.  To
> check, I just now downloaded the ovpn file for a new connection.  It
> loaded and installed and connected just fine.

I use ExpressVPN, and from the command line it works both with the
supplied executable and using "openvpn --config .opvn". However
although the NM widget loads the ovpn file without complaint, and I add
the user/pw information in the appropriate boxes, it refuses to
connect. No biggie as I can keep using the Shell version, but I think
the NM GUI leaves a lot to be desired unless you know exactly what
you're doing.

poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/14/17 13:42, InvalidPath wrote:
> Has anyone had luck importing their .ovpn file into Network Manager? 
> When I do it, the dialog box disappears and I'm left staring at the
> network list (wifi, eth0, br0, etc) with no new VPN connection
> listed.  No errors or anything.


On a second try I found one thing that may be tripping you up.

If I download the file from ironsocket it originally has a .bin suffix. 
If I don't rename the file to a .ovpn file I run into the same situation
you describe.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Importing OpenVPN. ovpn file in Fedora 25

[Ed Greshko]

On 02/14/17 13:42, InvalidPath wrote:
> Has anyone had luck importing their .ovpn file into Network Manager? 
> When I do it, the dialog box disappears and I'm left staring at the
> network list (wifi, eth0, br0, etc) with no new VPN connection
> listed.  No errors or anything.


Yes.  My VPN provider is ironsocket.com.  I am running F25 and KDE.  To
check, I just now downloaded the ovpn file for a new connection.  It
loaded and installed and connected just fine.

-- 
Fedora Users List - The place to go to get others to do the work for you
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org