<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi</p>
<p>Using Debian 13 myself.</p>
<p>Editing the NMconnection file and adding
"data-ciphers=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-128-CBC"
does solve the connection issue however....</p>
<p>The real bug seems to relate to the fact NetworkManager must be
restarted before trying the connection, preferably stopped then
restarted after modifying the file. </p>
<p>In some cases the connection vanishes from NM however it still
appears in the systemconnections directory. Go figure?</p>
<p>The import option is a bit of a mess, it misses the whole section
for TLS and adds the port to the file name which then seems to
corrupt the import. My solution is to create a basic OpenVPN
connnection, Stop NM, edit the file, start NM and pray!</p>
<p>A template for import would be useful as I can't fathom the file
structure or fields required.</p>
<p>Example of one of my working configs.</p>
<p> <span style="font-family:monospace"><span
style="font-weight:bold;color:#54ff54;background-color:#ffffff;">[connection]</span><span
style="color:#000000;background-color:#ffffff;">
</span></span><br>
</p>
<span style="font-family:monospace"><span
style="color:#000000;background-color:#ffffff;">id=us-la2-smart.serverlocation.co</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">uuid=bd3e845a-f09e-4a31-b94e-108d72dc6d39</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">type=vpn</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<br>
<span
style="font-weight:bold;color:#54ff54;background-color:#ffffff;">[vpn]</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">auth=SHA256</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">ca=/VPN/serverlocation.crt</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">cipher=AES-256-CBC</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">data-ciphers=AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">connection-type=password</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">dev-type=tun</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">float=no</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">mssfix=no</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">ns-cert-type=server</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">password-flags=1</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">port=1194</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">proto-tcp=yes</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">remote=us-la2-smart.serverlocation.co</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">remote-random=no</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">ta=/VPN/tls.crt</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">ta-dir=1</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">tun-ipv6=no</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">tunnel-mtu=1500</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">username=harryharry</span><span
style="color:#000000;background-color:#ffffff;"> </span><br>
<span style="color:#000000;background-color:#ffffff;">service-type=org.freedesktop.NetworkManager.openvpn</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<br>
<span
style="font-weight:bold;color:#54ff54;background-color:#ffffff;">[ipv4]</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<span style="color:#000000;background-color:#ffffff;">method=auto</span><span
style="color:#000000;background-color:#ffffff;">
</span><br>
<br>
<span
style="font-weight:bold;color:#54ff54;background-color:#ffffff;">[ipv6]</span><br>
<span style="color:#000000;background-color:#ffffff;">
</span><br>
</span>
<br>
<br>
</body>
</html>