Bug 1639811

Summary:	[NetworkManager-openvpn] does not save TLS authentication settings
Product:	[Fedora] Fedora	Reporter:	Joachim Frieben <jfrieben>
Component:	NetworkManager-openvpn	Assignee:	Lubomir Rintel <lkundrak>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	28	CC:	bgalvani, choeger, code, dcbw, ekanter, lkundrak, steve, thaller
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	NetworkManager-openvpn-1.8.8-1.fc28 NetworkManager-openvpn-1.8.8-1.fc29	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-10-23 21:08:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Joachim Frieben 2018-10-16 16:05:47 UTC

Description of problem:
Current Fedora 28 ignores TLS authentication parameters entered when setting up an OpenVPN connection by means of gnome-control-center.
After entering all required data, confirmation, and saving the OpenVPN connection, activation of the connection fails. Inspection reveals that the TLS related panel shows no settings at all. All user input has been ignored.

Version-Release number of selected component (if applicable):
NetworkManager-openvpn-1.8.6-1.fc28

How reproducible:
Always

Steps to Reproduce:
1. Set up OpenVPN connection by means of gnome-control-center.
2. Activate connection.

Actual results:
Activation of OpenVPN connection fails.

Expected results:
Activation of OpenVPN connection succeeds.

Additional info:
After downgrading to NetworkManager-openvpn-1.8.2-1.fc28, all parameters are applied correctly, and the OpenVPN connection works as expected.

Comment 1 Thomas Haller 2018-10-16 16:38:24 UTC

what gives `dnf list installed libnma` ?

Comment 2 Joachim Frieben 2018-10-16 17:06:17 UTC

(In reply to Thomas Haller from comment #1)
Installed Packages
libnma.x86_64        1.8.10-2.fc28.2        @fspin-release-2018-09-23-1537746069

Comment 3 Beniamino Galvani 2018-10-17 07:28:00 UTC

I think this is fixed by commit:

https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/commit/a41d93ee654cb77ba117c648006abce5654a053c

I'll prepare an updated package.

Comment 4 Fedora Update System 2018-10-17 12:34:50 UTC

NetworkManager-openvpn-1.8.8-1.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-30ae2eece8

Comment 5 Fedora Update System 2018-10-17 12:36:10 UTC

NetworkManager-openvpn-1.8.8-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c8d6b8c86

Comment 6 Joachim Frieben 2018-10-17 17:11:11 UTC

The regression was introduced after NetworkManager-openvpn-1.8.4-1.fc28. Indeed, it is still possible to use an existing OpenVPN connection with NetworkManager-openvpn-1.8.6-1.fc28 which has been created with an earlier version.

Comment 7 Fedora Update System 2018-10-17 23:31:39 UTC

NetworkManager-openvpn-1.8.8-1.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-30ae2eece8

Comment 8 Fedora Update System 2018-10-18 05:16:40 UTC

NetworkManager-openvpn-1.8.8-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-5c8d6b8c86

Comment 9 Fedora Update System 2018-10-23 21:08:33 UTC

NetworkManager-openvpn-1.8.8-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2018-10-30 17:29:16 UTC

NetworkManager-openvpn-1.8.8-1.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.

Comment 11 Eugene Kanter 2022-06-04 16:38:59 UTC

Observing the same behavior again in F36. An attempt to change protocol from TCP to UDP in already configured connection results in lines

ta=/path/to/key
ta-dir=1

removed from configuration file [vpn] section.