Bug 1229504 - openvpn-2.3.7 is available
Summary: openvpn-2.3.7 is available
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: openvpn
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Gwyn Ciesla
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-06-09 01:18 UTC by Upstream Release Monitoring
Modified: 2015-08-10 15:32 UTC (History)
5 users (show)

Fixed In Version: openvpn-2.3.7-1.el6
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-06-18 13:26:46 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Upstream Release Monitoring 2015-06-09 01:18:42 UTC
Latest upstream release: 2.3.7
Current version/release in rawhide: 2.3.6-1.fc22
URL: http://www.openvpn.net/

Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy

More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring

Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.

Comment 1 Upstream Release Monitoring 2015-06-09 01:18:57 UTC
Failed to kick off scratch build.

list index out of range

Comment 2 Upstream Release Monitoring 2015-06-09 13:40:47 UTC
limb's openvpn-2.3.7-1.fc23 completed http://koji.fedoraproject.org/koji/buildinfo?buildID=644460

Comment 3 Fedora Update System 2015-06-09 13:55:19 UTC
openvpn-2.3.7-1.el6 has been submitted as an update for Fedora EPEL 6.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.el6

Comment 4 Fedora Update System 2015-06-09 13:56:29 UTC
openvpn-2.3.7-1.el7 has been submitted as an update for Fedora EPEL 7.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.el7

Comment 5 Fedora Update System 2015-06-09 13:56:38 UTC
openvpn-2.3.7-1.fc22 has been submitted as an update for Fedora 22.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.fc22

Comment 6 Fedora Update System 2015-06-09 13:56:44 UTC
openvpn-2.3.7-1.el5 has been submitted as an update for Fedora EPEL 5.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.el5

Comment 7 Fedora Update System 2015-06-09 13:56:51 UTC
openvpn-2.3.7-1.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.fc21

Comment 8 Fedora Update System 2015-06-09 13:56:58 UTC
openvpn-2.3.7-1.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/openvpn-2.3.7-1.fc20

Comment 9 Fedora Update System 2015-06-09 19:59:14 UTC
Package openvpn-2.3.7-1.el6:
* should fix your issue,
* was pushed to the Fedora EPEL 6 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing openvpn-2.3.7-1.el6'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6623/openvpn-2.3.7-1.el6
then log in and leave karma (feedback).

Comment 10 Upstream Release Monitoring 2015-06-18 00:37:34 UTC
ausil's openvpn-2.3.7-2.fc23 completed http://koji.fedoraproject.org/koji/buildinfo?buildID=655095

Comment 11 Fedora Update System 2015-06-18 13:26:46 UTC
openvpn-2.3.7-1.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 12 Fedora Update System 2015-06-21 00:08:21 UTC
openvpn-2.3.7-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 13 Fedora Update System 2015-06-21 00:36:21 UTC
openvpn-2.3.7-1.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 14 Fedora Update System 2015-06-25 23:55:51 UTC
openvpn-2.3.7-1.el5 has been pushed to the Fedora EPEL 5 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 15 Fedora Update System 2015-06-25 23:56:39 UTC
openvpn-2.3.7-1.el7 has been pushed to the Fedora EPEL 7 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 16 Fedora Update System 2015-06-25 23:57:46 UTC
openvpn-2.3.7-1.el6 has been pushed to the Fedora EPEL 6 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 17 Leon Fauster 2015-07-31 13:27:24 UTC
EPEL 5: 

Since the update from 2.3.6 to 2.3.7 the private 
key password request does not work anymore. 

Before 2.3.7:
# service openvpn start
<here password interaction>

Result: service is working (established connection)


While on 2.3.7:

# service openvpn start
<no request here>

And looking into the logs shows:

# tail -4 /var/log/messages
Jul 31 15:21:43 ee openvpn[6046]: OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun  9 2015
Jul 31 15:21:43 ee openvpn[6046]: library versions: OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008, LZO 2.02
Jul 31 15:21:43 ee openvpn[6047]: Error: private key password verification failed
Jul 31 15:21:43 ee openvpn[6047]: Exiting due to fatal error


Upstreams changelog does not lists changes that could correlate with the above:
https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.7


I am raising this here up because minor updates should not change functionality ...

Comment 18 David Sommerseth 2015-08-10 15:32:47 UTC
(In reply to Leon Fauster from comment #17)
> EPEL 5: 
> 
> Since the update from 2.3.6 to 2.3.7 the private 
> key password request does not work anymore. 
> 
> Before 2.3.7:
> # service openvpn start
> <here password interaction>
> 
> Result: service is working (established connection)
> 
> 
> While on 2.3.7:
> 
> # service openvpn start
> <no request here>
> 
> And looking into the logs shows:
> 
> # tail -4 /var/log/messages
> Jul 31 15:21:43 ee openvpn[6046]: OpenVPN 2.3.7 x86_64-redhat-linux-gnu [SSL
> (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun  9 2015
> Jul 31 15:21:43 ee openvpn[6046]: library versions: OpenSSL
> 0.9.8e-fips-rhel5 01 Jul 2008, LZO 2.02
> Jul 31 15:21:43 ee openvpn[6047]: Error: private key password verification
> failed
> Jul 31 15:21:43 ee openvpn[6047]: Exiting due to fatal error
> 
> 
> Upstreams changelog does not lists changes that could correlate with the
> above:
> https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.7

This can be related to some other changes in how OpenVPN is initialized and daemonized.  See commit da9b292733e929a2900d and 315f6fbc7f657a7f11 for more details.

> I am raising this here up because minor updates should not change
> functionality ...

This is unfortunate, and this is more likely an upstream bug than a Fedora EPEL packaging issue.

Please re-test with the coming 2.3.8 release, which should fix a few corner cases related to password queries.  If you still have issues, please report it to the upstream OpenVPN project as this issue needs to be fixed there.

https://community.openvpn.net/openvpn/newticket (you need to have an account there to be able to report new issues).


Note You need to log in before you can comment on or make changes to this bug.