Bug 1016215 - vpnc can't connect to fritzbox vpn
Summary: vpnc can't connect to fritzbox vpn
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: vpnc
Version: rawhide
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Felix Schwarz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-10-07 17:48 UTC by Samuel Kickhäfer
Modified: 2014-11-16 14:44 UTC (History)
5 users (show)

Fixed In Version: vpnc-0.5.3-24.svn550.fc21
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-11-16 14:44:43 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
proposed commit for master (2.17 KB, patch)
2014-11-06 10:35 UTC, Felix Schwarz
no flags Details | Diff
proposed commit for f21 (2.17 KB, patch)
2014-11-06 10:36 UTC, Felix Schwarz
no flags Details | Diff
proposed commit for f20 (2.14 KB, patch)
2014-11-06 10:37 UTC, Felix Schwarz
no flags Details | Diff

Description Samuel Kickhäfer 2013-10-07 17:48:03 UTC
Description of problem:
vpnc cannot connect to the vpn-server provided by a fritzbox router.
The problem of the draft-ietf-ipsec-nat-t-ike-03 issue is described in this blog post:

http://www.pabloendres.com/2013/02/27/vpnc-and-fritzbox/

Version-Release number of selected component (if applicable):
vpnc-0.5.3-svn457

How reproducible:
always

Steps to Reproduce:
1. Create a IPsec VPN on a fritzbox router
2. Try to connect with vpnc
3.

Actual results:
Cannot establish the vpn connection

Expected results:
Establish the vpn connection

Additional info:

Should be solved by updating to vpnc-0.5.3-svn517

Comment 1 speedygonzalez 2014-11-02 11:37:43 UTC
Same with Fedora 20.

Can you please update to vpnc-0.5.3-svn517.

Thanks

Comment 2 speedygonzalez 2014-11-02 11:44:44 UTC
Because the link from the first post does't work, here is a new one http://www.pabloendres.com/vpnc-and-fritzbox/

Comment 3 Felix Schwarz 2014-11-02 13:57:35 UTC
Btw: I have a working vpnc for F20 with svn revision 517 which I'm using to connect to a Fritzbox. I applied for co-maintainership. Once this is approved I can push an updated package.

Comment 4 Felix Schwarz 2014-11-06 10:35:55 UTC
Created attachment 954385 [details]
proposed commit for master

Comment 5 Felix Schwarz 2014-11-06 10:36:53 UTC
Created attachment 954386 [details]
proposed commit for f21

Comment 6 Felix Schwarz 2014-11-06 10:37:24 UTC
Created attachment 954387 [details]
proposed commit for f20

Comment 7 Felix Schwarz 2014-11-06 10:42:35 UTC
I added my proposed changes for vpnc as attachments so Christian can review them first. Personally I would update vpnc in rawhide, f21, and f20 as I think this should be safe (no user visible changes AFAIK and there is no shared library so  ABI isn't a problem as well).

I tested the F20 version and I was able to connect to a Fritzbox successfully with this version (while previously I couldn't using stock Fedora packages).

@chkr: I built changes before the fix for bug 1128147 because it made cherry-picking easier.

(moving version to "rawhide" as this is technically not a bug but a new feature which requires a new vpnc version.)

Comment 8 Felix Schwarz 2014-11-06 10:50:27 UTC
Btw: I'd not update F19 at this point even though the bug report was originally for that version. F19 goes end of life in about two months (assuming the F21 release happens as planned in early December). If there is a need for F19 packages, please comment in this bug report.

Comment 9 Christian Krause 2014-11-09 23:56:59 UTC
I have reviwed the proposed patch. Everything is OK, please commit it. I'm OK with the suggestion to update rawhide, F21 and F20.

Comment 10 Fedora Update System 2014-11-10 09:33:22 UTC
vpnc-0.5.3-24.svn550.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/vpnc-0.5.3-24.svn550.fc21

Comment 11 Fedora Update System 2014-11-10 09:34:53 UTC
vpnc-0.5.3-21.svn550.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/vpnc-0.5.3-21.svn550.fc20

Comment 12 Felix Schwarz 2014-11-10 09:36:43 UTC
As you can see I pushed updates to the testing repository for F20 and F21:
https://admin.fedoraproject.org/updates/vpnc-0.5.3-21.svn550.fc20
https://admin.fedoraproject.org/updates/vpnc-0.5.3-24.svn550.fc21

I'd encourage everyone to try out the updated packages above as they fix the issue for me. Please add good karma if it works for you :-)

Comment 13 Fedora Update System 2014-11-12 02:40:17 UTC
Package vpnc-0.5.3-24.svn550.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing vpnc-0.5.3-24.svn550.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-14749/vpnc-0.5.3-24.svn550.fc21
then log in and leave karma (feedback).

Comment 14 Fedora Update System 2014-11-15 09:23:01 UTC
vpnc-0.5.3-21.svn550.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 15 Fedora Update System 2014-11-16 14:44:43 UTC
vpnc-0.5.3-24.svn550.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.