[Pkg-utopia-maintainers] Bug#910511: Bug#910511: network-manager-openvpn: openvpn 2.4 in stable supports tls-crypt, but nm-openvpn 1.2.8 in stable doesn't

[Michael Biebl]

Am 07.10.18 um 15:55 schrieb Gijs Molenaar:
> Package: network-manager-openvpn
> Version: 1.2.8-2
> Severity: important
> 
> Dear Maintainer,
> 
> I'm developing a UI wrapper around various platforms for an open VPN service.
> Debian 9 is one of our targetted platforms. We have tls-crypt enabled for our
> service, which works on Debian 9 since it is bundeled with openVPN 2.4.0. The
> problem is the network-manager-openvpn package, which doesn't seem to have
> support for this setting. This is a bit of a pitty, since technically it should
> work. The limitation becomes apparant when you for example import a .ovpn file
> in the UI with a tls-crypt statement in it. The import will fail.
> 
> It looks like network-manager-openvpn > 1.2.10 actually has support for the
> tls-crypt statement.
> 
> Now i'm not sure if this is the right spot to request such a thing, but is it
> somehow possible to get network-manager-openvpn > 1.2.10 into stable? Important
> security features are now not available to stable users, while technically it
> is supported.

stable updates are supposed to fix security issues or grave bugs and not
add new features or add new upstream versions.

That said, 1.2.10 could be provided via stretch-backports:
https://backports.debian.org/

Would this suffice for you?



-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20181007/71a2305e/attachment.sig>