Bug 1248252

Summary: OpenVPN doesn't detect certificate in the same folder as the config file.
Product: [Fedora] Fedora Reporter: Pinkie Pie <amadren>
Component: openvpnAssignee: Gwyn Ciesla <gwync>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 23CC: amadren, davids, ed.greshko, gwync, huzaifas, steve
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Other   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-08-14 07:54:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Workaround none

Description Pinkie Pie 2015-07-30 00:37:36 UTC
Created attachment 1057468 [details]
Workaround

Description of problem:
When trying to connect to a vpn (with the cli using "openvpn --config xxx.xxx" and the network manager), it just fail if the working dir is not the same as the config file and the path is not the full path (exemple: ca ca/crt is not working when ca /home/xxx/ca.crt works fine). Weird thing: it worked once but when I killed openvpn (using pkill), it didn't worked anymore. I have the same problem using the networkmanager and an imported config file.

Steps to Reproduce:
1.Make a fresh install of Fedora 23
2.Connect to a vpn through openvpn cli
3.kill openvpn using pkill
4.Try to reconnect

Actual results:
[pinkie@linux ~]$ openvpn --config VPN/SE1-Suède.ovpn
Thu Jul 30 02:30:41 2015 Option 'nobind' in VPN/SE1-Suède.ovpn:20 is ignored by previous <connection> blocks 
Options error: --ca fails with 'ca.crt': No such file or directory
Options error: --tls-auth fails with 'ta.key': No such file or directory
Options error: Please correct these errors.
Use --help for more information.


Expected results:
Connection to the vpn

Additional info:
I'm pretty sure it's an issue involving killing openvpn using pkill. Also I tried to remove openvpn but I'm new to fedora so I don't know how to flush config files etc... (like an apt-get remove --purge)

Also, with the script attached to the bug, I have no problems.

Sorry for my poor english btw :(

Comment 1 Ed Greshko 2015-08-11 04:13:17 UTC
This issue has been discussed on the "Users" list and the problem identified thus far has been putting the certs in directories lacking the proper selinux contexts for certs.

Comment 2 Pinkie Pie 2015-08-14 07:54:07 UTC
Resolved.