[Bug 2020893] [NEW] Changing path for the certificates and keys doesn't work

Launchpad Bug Tracker 2020893 at bugs.launchpad.net
Fri May 26 13:29:46 UTC 2023


You have been subscribed to a private bug by mastier1 (mastier1):

If you modify existing OpenVPN connection NetworkManager does not
reflect them without restart

I changed path for files (other directory), yet it still tries to load
the old path

mastier at drakkar:~$ nmcli con up 'Canonical UK'
Error: Connection activation failed: Unknown reason
Hint: use 'journalctl -xe NM_CONNECTION=9328632c-dcb0-4414-8609-20285bf0acb8 + NM_DEVICE=eno1' to get more details.

mastier at drakkar:~$ grep -iHR openvpn /var/log/syslog|tail
/var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Cannot pre-load keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:16:43 drakkar nm-openvpn[726598]: Exiting due to fatal error
/var/log/syslog:May 26 15:16:55 drakkar NetworkManager[5372]: <info>  [1685107015.3225] vpn[0x555f6a6a6750,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: starting openvpn
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Cannot pre-load keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:16:55 drakkar nm-openvpn[727045]: Exiting due to fatal error
/var/log/syslog:May 26 15:19:40 drakkar NetworkManager[5372]: <info>  [1685107180.3388] vpn[0x555f6a6a69d0,9328632c-dcb0-4414-8609-20285bf0acb8,"Canonical UK"]: starting openvpn
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Cannot pre-load keyfile (/home/mastier/Documents/vpn/canonical_ta.key)
/var/log/syslog:May 26 15:19:40 drakkar nm-openvpn[731307]: Exiting due to fatal error

$ nmcli con show 'Canonical UK' |grep Docum
vpn.data:                               ca = /home/mastier/Documents/canonical-vpn/canonical_ca.crt, cert = /home/mastier/Documents/canonical-vpn/canonical-mastier.crt, cert-pass-flags = 0, cipher = AES-128-CBC, comp-lzo = adaptive, connection-type = tls, dev = tun, dev-type = tun, key = /home/mastier/Documents/canonical-vpn/canonical-mastier.key, ping = 10, ping-restart = 60, remote = uk.sesame.canonical.com:29419, remote-cert-tls = server, ta = /home/mastier/Documents/vpn/canonical_ta.key, ta-dir = 1, verify-x509-name = name:access.is

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: network-manager-openvpn 1.8.18-1
ProcVersionSignature: Ubuntu 6.1.0-1012.12-oem 6.1.25
Uname: Linux 6.1.0-1012-oem x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu82.4
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
Date: Fri May 26 15:21:21 2023
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: network-manager-openvpn
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: network-manager (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: network-manager-openvpn (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy wayland-session
-- 
Changing path for the certificates and keys doesn't work
https://bugs.launchpad.net/bugs/2020893
You received this bug notification because you are a member of Network-manager, which is subscribed to the bug report.



More information about the Ubuntu-reviews mailing list