Bug#1050214: network-manager-openconnect-gnome: Hangs after upgrade to 1.2.10-1

[Wouter Verhelst]

Package: network-manager-openconnect-gnome
Version: 1.2.10-1
Severity: important

Hi,

I don't use gnome; I use awesome with a freedesktop.org-compatible
system tray in which I run nm-applet. This seems to work fine.

When I use network-manager-openconnect and -gnome from stable, I can
connect to the VPN at $DAYJOB (a Cisco AnyConnect VPN). However, after
upgrading to the version in unstable, I can't. When I try using the
version in unstable, the Openconnect dialog appears and seems to do its
thing. The VPN is set up to request a second factor out of band (through
my cell phone), and that happens. Once I approve the log in, however,
the nm-applet hangs; the UI freezes and clicking on it does not make the
menu appear.

At this point, the following lines appear on the stdout of nm-applet:

** (nm-openconnect-auth-dialog:9269): CRITICAL **: 09:24:25.757: process_stdin: assertion 'status == G_IO_STATUS_NORMAL' failed

** (nm-openconnect-auth-dialog:9274): CRITICAL **: 09:24:25.896: process_stdin: assertion 'status == G_IO_STATUS_NORMAL' failed
Downloading: cscan
rm: kan '/home/wouter/.cisco/hostscan/bin/cscan.tmp' niet verwijderen: Bestand of map bestaat niet
Failure on cscan, trying gz
Downloading: libcsd.so
rm: kan '/home/wouter/.cisco/hostscan/lib/libcsd.so.tmp' niet verwijderen: Bestand of map bestaat niet
Failure on libcsd.so, trying gz
Downloading: libhostscan.so
rm: kan '/home/wouter/.cisco/hostscan/lib/libhostscan.so.tmp' niet verwijderen: Bestand of map bestaat niet
Failure on libhostscan.so, trying gz
Downloading: libwaapi.so
rm: kan '/home/wouter/.cisco/hostscan/lib/libwaapi.so.tmp' niet verwijderen: Bestand of map bestaat niet
Failure on libwaapi.so, trying gz
Launching: /home/wouter/.cisco/hostscan/bin/cstub -log error -ticket "491663C95A2787D05D0C2B93" -stub "0" -group "" -host "https://217.111.249.109/CACHE" -certhash "C888C20D189D2799C6EF227330448FC0:"

whereas the NetworkManager journal gets the following log entries:

aug 22 09:24:25 pc220518 NetworkManager[8855]: <info> [1692689065.6091] vpn[0x559caf3b7820,fb276fb6-f660-4a5f-99f8-f7173bb1fe33,"<name censored>"]: starting openconnect
aug 22 09:24:25 pc220518 NetworkManager[8855]: <info> [1692689065.6097] audit: op="connection-activate" uuid="fb276fb6-f660-4a5f-99f8-f7173bb1fe33" name="<name censored>" pid=9115 uid=1000 result="success"

at which point everything hangs.

Restarting the NetworkManager systemd unit additionally adds this to the journal:


aug 22 09:26:24 pc220518 NetworkManager[8855]: <warn> [1692689184.9734] vpn[0x559caf3b7820,fb276fb6-f660-4a5f-99f8-f7173bb1fe33,"Zetes PASS AnyConnect"]: secrets: failed to request VPN secrets #3: No agents were available for this request.
aug 22 09:26:27 pc220518 NetworkManager[8855]: <info> [1692689187.7615] agent-manager: agent[1659a8c6bdb6724e,:1.115/org.freedesktop.nm-applet/1000]: agent registered
aug 22 09:27:13 pc220518 NetworkManager[8855]: <info> [1692689233.7565] agent-manager: agent[0efbfa6130ae5284,:1.122/org.freedesktop.nm-applet/1000]: agent registered

(it may be that the latter two only appeared after restarting nm-applet; I'm not sure now)

If any further information is necessary to help me debug this, please let me know.

Thanks,

-- System Information:
Debian Release: trixie/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64

Kernel: Linux 6.4.0-3-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8), LANGUAGE=nl_BE:nl
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages network-manager-openconnect-gnome depends on:
ii libc6 2.37-7
ii libgcr-base-3-1 3.41.1-3
ii libgcr-ui-3-1 3.41.1-3
ii libglib2.0-0 2.77.2-1
ii libgtk-3-0 3.24.38-4
ii libgtk-4-1 4.10.5+ds-3
ii libnm0 1.44.0-1
ii libnma-gtk4-0 1.10.6-1
ii libnma0 1.10.6-1
ii libopenconnect5 9.12-1
ii libsecret-1-0 0.21.0-1
ii libsoup2.4-1 2.74.3-1
ii libwebkit2gtk-4.0-37 2.40.5-1
ii libxml2 2.9.14+dfsg-1.3
ii network-manager-openconnect 1.2.10-1

network-manager-openconnect-gnome recommends no packages.

network-manager-openconnect-gnome suggests no packages.

-- no debconf information