[Pkg-utopia-maintainers] Bug#1024275: network-manager-openvpn: can't connect to vpn after last update: can't set proper cipher.

[Daniel Serpell]

Package: network-manager-openvpn
Version: 1.10.2-1
Severity: normal

Dear maintainer,

After upgrading to 1.10.2-1, I can't connect to the VPN anymore.

This is the logs from NetworkManager:

  nm-openvpn[]: [<vpn name>] Peer Connection Initiated with [AF_INET]<IP>:<PORT>
  nm-openvpn[]: OPTIONS ERROR: failed to negotiate cipher with server.  Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM') if you want to connect to this server.
  nm-openvpn[]: ERROR: Failed to apply push options
  nm-openvpn[]: Failed to open tun/tap interface
  nm-openvpn[]: SIGUSR1[soft,process-push-msg-failed] received, process restarting

Trying to change the cipher to AES-256-CBC in network properties does not work, it reverts back to AES-256-GCM.

Regards,

   Daniel.


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.0-4-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager-openvpn depends on:
ii  adduser          3.129
ii  libc6            2.36-5
ii  libglib2.0-0     2.74.1-2
ii  libnm0           1.40.2-1
ii  network-manager  1.40.2-1
ii  openvpn          2.6.0~git20220818-1+b1

network-manager-openvpn recommends no packages.

network-manager-openvpn suggests no packages.

-- no debconf information