Bug 1350108

Summary: Add button in OpenVPn remains inactive
Product: [Fedora] Fedora Reporter: David Paige <david.paige>
Component: NetworkManager-openvpnAssignee: Lubomir Rintel <lkundrak>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: 24CC: choeger, david.paige, dcbw, huzaifas, lkundrak, psimerda, steve, thaller
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: NetworkManager-openvpn-1.2.4-1.fc24 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-10 05:54:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
proxpn udp ovpn file none

Description David Paige 2016-06-25 16:08:01 UTC 
Description of problem:
The Add button on the OpenVPN does not become active.


Version-Release number of selected component (if applicable):
Fedora 24

How reproducible:


Steps to Reproduce:
1. Start Network Settings
2. Select Add VPN
3. Select import from file
4. Select the file 
5. The fields populate but the Add button stayed grayed out.

Actual results:
The vpn configuration cannot be added.

Expected results:
The vpn configuration should be added.

Additional info:
This worked in Fedora 23.
Comment 1 Thomas Haller 2016-06-25 16:14:53 UTC 
Hi,

which UI are you using? gnome-control-center? Does it work with nm-connection-editor?

What does the tooltip say with the mouse hovering over the "add" button?

How does the file look you are trying to import? (possibly obfusciate secrets).


Thanks
Comment 2 Thomas Haller 2016-06-25 17:02:23 UTC 
Do you have NetworkManager-libreswan installed? Could you check if the problem also happens if you uninstall that package? Thanks.
Comment 3 David Paige 2016-06-25 20:29:20 UTC 
Created attachment 1172378 [details]
proxpn udp ovpn file

This is the proxpn udp ovpn file for the Chicago server.
Comment 4 David Paige 2016-06-25 20:30:59 UTC 
(In reply to Thomas Haller from comment #1)
> Hi,
> 
> which UI are you using? gnome-control-center? Does it work with
> nm-connection-editor?
> 
> What does the tooltip say with the mouse hovering over the "add" button?
> 
> How does the file look you are trying to import? (possibly obfusciate
> secrets).
> 
> 
> Thanks

I have tried this an a regular user and an admin.  I have tried this from gnome and Cinnamon.  In each case, I selected it by clicking the network icon on the toolbar and selecting network connections.
Comment 5 David Paige 2016-06-25 20:35:50 UTC 
(In reply to Thomas Haller from comment #2)
> Do you have NetworkManager-libreswan installed? Could you check if the
> problem also happens if you uninstall that package? Thanks.

Removing libreswan does not have any effect.  I also discovered that I get tooltips for all of the items except Advanced, Cancel, and Add.
Comment 6 David Paige 2016-06-25 22:04:43 UTC 
Running nm-connection-editor from the command line enables tooltips for the Save button.  It says "Invalid Setting IPv4 Settings.ipv4.routes:1.route cannot be a default route"

I can not seem to adjust the ipv4 settings to satisfy the connection-editor.
Comment 7 Thomas Haller 2016-06-27 16:15:18 UTC 
I recompiled nm-connection-editor and nm-openvpn from Fedora 23. That doesn't work to import the file either (at the very least, because at that time nm-openvpn didn't support inline certificates yet).
Hence, I cannot confirm that this worked on Fedora 23 (without manually tweaking the imported connection afterwards).


On Fedora 24, the tooltip says: "Invalid setting VPN: username", which seems correct because the type is detected as NM_OPENVPN_CONTYPE_PASSWORD_TLS, which requires a username. NM_OPENVPN_CONTYPE_PASSWORD_TLS is detected because of the presence of "auth-user-pass", "ca", "cert", and "key".
That seems right, because openvpn allows you to omit the username, but ask for it later. nm-openvpn doesn't support that (at least for now).


After entering a username, the failure is "Invalid Setting IPv4 Settings.ipv4.routes:1.route cannot be a default route". There is a fix for that in https://git.gnome.org/browse/network-manager-openvpn/log/?h=th/import-route-rh1350108
Comment 8 Thomas Haller 2016-06-30 07:44:44 UTC 
merged upstream: https://git.gnome.org/browse/network-manager-openvpn/commit/?id=935df24c0aae7b8d4ebc177e7618cf7453289882
Comment 9 Fedora Update System 2016-07-04 10:09:33 UTC 
NetworkManager-openvpn-1.2.4-1.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-c719a6115b
Comment 10 Fedora Update System 2016-07-05 08:53:01 UTC 
NetworkManager-openvpn-1.2.4-1.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-c719a6115b
Comment 11 Fedora Update System 2016-07-10 05:54:38 UTC 
NetworkManager-openvpn-1.2.4-1.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.