I had this problem with different debian derivatives (ubuntu, pop-os,
raspbian, mint) and I was recently motivated to look into it (with 22.04
about to expire).

My main work laptop runs ubuntu 22.04 and the office VPN works just fine
there. However on various more recentish versions the network manager
connection imported from the very same .ovpn file did not work. I would
get a password prompt in a loop until I give up and cancel. The very
same .ovpn file works just fine from the command line (openvpn --config
... --daemon) and since those machines are mostly headless that was an
acceptable workaround.

Looking at what network manager tries to run and comparing it with what
--config would run I tracked the difference to the "data-ciphers"
parameter.

On ubuntu 22.04, where things work, network manager does not pass
--data-ciphers parameter. On mint 22.3 it does pass --data-ciphers
parameter (not in the ovpn file) and it passes the same value for it as
the one specified for --ciphers. The problem is that it's a wrong thing
to do. That behaviour was reverted in

https://gitlab.gnome.org/GNOME/NetworkManager-
openvpn/-/commit/a790374f4c2e9e1657cbb8470357d72d4bd87916

The fact that there's no support for data-ciphers in the GUI until quite
recently doesn't help.

On that new mint system I have manually added the right data-cipthers
parameter to the netplan yaml file to avoid the bogus default and it
worked (running config with verbosity set to 3 told me which cipher was
negotiated). I guess it will be clobbered next time I edit the
connection via the GUI, but for now it's a workaround I can live with.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2084400

Title:
  Cannot add a VPN with "cipher AES-256-CBC"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/2084400/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to