[Pkg-utopia-maintainers] Bug#1024275: Bug#1024275: network-manager-openvpn: can't connect to vpn after last update: can't set proper cipher.

[Michael Biebl]

Control: severity -1 normal
Control: notforwarded -1

Am 16.11.22 um 22:54 schrieb Daniel Serpell:
> Package: network-manager-openvpn
> Version: 1.10.2-1
> Severity: normal
> 
> Dear maintainer,
> 
> After upgrading to 1.10.2-1, I can't connect to the VPN anymore.
> 
> This is the logs from NetworkManager:
> 
>    nm-openvpn[]: [<vpn name>] Peer Connection Initiated with [AF_INET]<IP>:<PORT>
>    nm-openvpn[]: OPTIONS ERROR: failed to negotiate cipher with server.  Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM') if you want to connect to this server.
>    nm-openvpn[]: ERROR: Failed to apply push options
>    nm-openvpn[]: Failed to open tun/tap interface
>    nm-openvpn[]: SIGUSR1[soft,process-push-msg-failed] received, process restarting
> 
> Trying to change the cipher to AES-256-CBC in network properties does not work, it reverts back to AES-256-GCM.

I recreated the failing OpenVPN connection and I can't reproduce the 
problem anymore.
I thus closed the upstream issue and dropped the forwarded meta data.

My recommendation, if you can still reproduce the issue, is to file the 
issue upstream [1] yourself. It's likely that upstream has further question.

Regards,
Michael
[1] https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20221122/54c54184/attachment.sig>