After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 791881 - auth param lost upon ovpn import
auth param lost upon ovpn import
Status: RESOLVED DUPLICATE of bug 774730
Product: NetworkManager
Classification: Platform
Component: VPN: openvpn
1.2.x
Other Linux
: Normal normal
: ---
Assigned To: NetworkManager maintainer(s)
NetworkManager maintainer(s)
Depends on:
Blocks:
 
 
Reported: 2017-12-22 18:29 UTC by Justin
Modified: 2018-01-04 18:51 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
.ovpn file showing the problem (357 bytes, text/plain)
2017-12-28 06:48 UTC, Justin 		Details

Description Justin 2017-12-22 18:29:51 UTC 
I'm running stock Linux Mint 18.3, based upon Ubuntu 16.04.

network-manager 1.2.2-0ubuntu0.16.04.4
network-manager-openvpn 1.1.93-1ubuntu1
OpenVPN 2.3.10

If I import a standard .ovpn file for PrivateInternetAccess vpn service,
the auth parameter ("auth sha1") is lost. This causes the connection to fail with the error "VPN connection: failed to connect interactively: 'Invalid HMAC auth.'" (from syslog). The GUI notification just says that openvpn failed to start.

When I go back into the GUI I notice that under Advanced -> Security, HMAC Authentication is set to "Default", rather than "SHA-1".

Setting it to SHA-1 (to match the ovpn file) fixes it and the connection succeeds.

Although I realize there are newer versions of network-manager, this version is shipping on lots of machines, and I didn't notice a bug fix matching this description, so wanted to bring it to your attention in case it is not known.
Comment 1 Thomas Haller 2017-12-27 09:18:25 UTC 
"auth sha1" works for me.

could you attach a ovpn file that shows the issue? Careful to mangle private information before posting.

Thanks.
Comment 2 Justin 2017-12-28 06:48:41 UTC 
Created attachment 366033 [details]
.ovpn file showing the problem

Note, the ovpn file refers to two certificate files which I do not include.
Comment 3 Thomas Haller 2018-01-04 18:51:18 UTC 
fixed upstream by https://git.gnome.org/browse/network-manager-openvpn/commit/?id=eb48d030e90d8d601faa9a013e4af3e209498ad6

This only affects the GTK UI (used by nm-connection-editor and gnome-control-center).

*** This bug has been marked as a duplicate of bug 774730 ***