[Pkg-utopia-maintainers] Bug#1024275: Bug#1024275: network-manager-openvpn: can't connect to vpn after last update: can't set proper cipher.

[Michael Biebl]

Control: severity -1 serious
Control: forwarded -1

Am 16.11.22 um 22:54 schrieb Daniel Serpell:
> Package: network-manager-openvpn
> Version: 1.10.2-1
> Severity: normal
> 
> Dear maintainer,
> 
> After upgrading to 1.10.2-1, I can't connect to the VPN anymore.
> 
> This is the logs from NetworkManager:
> 
>    nm-openvpn[]: [<vpn name>] Peer Connection Initiated with [AF_INET]<IP>:<PORT>
>    nm-openvpn[]: OPTIONS ERROR: failed to negotiate cipher with server.  Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM') if you want to connect to this server.
>    nm-openvpn[]: ERROR: Failed to apply push options
>    nm-openvpn[]: Failed to open tun/tap interface
>    nm-openvpn[]: SIGUSR1[soft,process-push-msg-failed] received, process restarting
> 
> Trying to change the cipher to AES-256-CBC in network properties does not work, it reverts back to AES-256-GCM.
> 

I experience an OpenVPN connection failure as well and suspect it's the 
same underlying issue as yours. I therefor filed this upstream at 
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/111

Please follow up on the upstream bug report, if you have additional 
information.
Marking as RC, so the buggy package doesn't migrate to testing.

Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20221117/401ce1a6/attachment.sig>