Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1009186: Unable to import any ovpn config file

554 views
Skip to first unread message

Arnaldo Pirrone

unread,
Apr 8, 2022, 8:50:03 AM4/8/22
to
Package: network-manager-openvpn-gnome
Version: 1.8.18-3
Severity: important
X-Debbugs-Cc: it9...@gmail.com

Hi,

When I try to import any saved vpn config, I get this error:

Can't create a new connection
The VPN plugin failed to import the VPN connection correctly:
Key file contains line "dev tun" which is not a key-value pair, group, or
comment

I know there was an issue that was preventing NetworkManager from importing
config files with inline certificates, but I think this has been sorted out a
long time ago, otherwise I can't explain how I was able to use it for such a
long time, also I currently have dozens of already saved VPN network
connections which I can't import again.

Can you please verify if this is also affecting your operations with
NetworkManager and report back?

Thank you


-- System Information:
Debian Release: bookworm/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.32-xanmod1 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages network-manager-openvpn-gnome depends on:
ii libc6 2.33-7
ii libglib2.0-0 2.72.0-1+b1
ii libgtk-3-0 3.24.33-1
ii libgtk-4-1 4.6.2+ds-1
ii libnm0 1.36.4-2
ii libnma-gtk4-0 1.8.36-1
ii libnma0 1.8.36-1
ii libsecret-1-0 0.20.5-2
ii network-manager-openvpn 1.8.18-3

network-manager-openvpn-gnome recommends no packages.

network-manager-openvpn-gnome suggests no packages.

-- no debconf information

Michael Biebl

unread,
Apr 8, 2022, 11:40:03 AM4/8/22
to
Am 08.04.22 um 14:45 schrieb Arnaldo Pirrone:
> Package: network-manager-openvpn-gnome
> Version: 1.8.18-3
> Severity: important
> X-Debbugs-Cc: it9...@gmail.com
>
> Hi,
>
> When I try to import any saved vpn config, I get this error:
>
> Can't create a new connection
> The VPN plugin failed to import the VPN connection correctly:
> Key file contains line "dev tun" which is not a key-value pair, group, or
> comment
>
> I know there was an issue that was preventing NetworkManager from importing
> config files with inline certificates, but I think this has been sorted out a
> long time ago, otherwise I can't explain how I was able to use it for such a
> long time, also I currently have dozens of already saved VPN network
> connections which I can't import again.
>
> Can you please verify if this is also affecting your operations with
> NetworkManager and report back?

Can you share an example config file?
OpenPGP_signature

Arnaldo Pirrone

unread,
Apr 9, 2022, 9:30:04 AM4/9/22
to
Sure:

the last I exported from pfSense looks like this, although they
previously had different options.
Just discovered this: if I put the p12 and key file away from the
directory, I am able to import the config file!
Then I put them back and the VPN connections work.
But if those files are inside the directory while importing then the
error message is right around the corner.
Hope this can help,


dev tun
persist-tun
persist-key
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
remote x.x.x.x 1194 udp4
nobind
verify-x509-name "xxxx" name
auth-user-pass
pkcs12 xxxx.p12
tls-auth xxxx.key 1
remote-cert-tls server
explicit-exit-notify


Il 08/04/22 alle 17:36, Michael Biebl ha scritto:

Michael Biebl

unread,
Apr 9, 2022, 10:20:04 AM4/9/22
to
So I guess in order to reproduce the issue, I'd actually need the
xxxx.key and xxxx.p12 files and put them in the same directory as the
ovpn file?

Am 09.04.22 um 15:23 schrieb Arnaldo Pirrone:
> _______________________________________________
> Pkg-utopia-maintainers mailing list
> Pkg-utopia-...@alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
>

OpenPGP_signature
0 new messages