GNOME Bugzilla – Bug 613154
Catch OpenVPN errors
Last modified: 2010-03-24 08:26:23 UTC
The certificate for my server had expired, and instead of saying that, NM just told me that the connection timed out. Looking in /var/log/messages, I get this though: Mar 17 15:01:25 mjolnir nm-openvpn[5848]: VERIFY ERROR: depth=0, error=certificate has expired: /C=SE/O=DrZeus.cx/OU=OpenVPN_key_for_drzeus.cx/CN=openvpn.drzeus.cx/emailAddress=root@drzeus.cx Mar 17 15:01:25 mjolnir nm-openvpn[5848]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Mar 17 15:01:25 mjolnir nm-openvpn[5848]: TLS Error: TLS object -> incoming plaintext read error Mar 17 15:01:25 mjolnir nm-openvpn[5848]: TLS Error: TLS handshake failed Mar 17 15:01:25 mjolnir nm-openvpn[5848]: Fatal TLS error (check_tls_errors_co), restarting Mar 17 15:01:25 mjolnir nm-openvpn[5848]: SIGUSR1[soft,tls-error] received, process restarting This shouldn't be a problem for NM to parse and present a more useful error.
Yeah, we should try harder to do this. Unfortunately this means screenscraping openvpn stdout, which really sucks, but it's the only way. *** This bug has been marked as a duplicate of bug 604335 ***