Bug 1248252 - OpenVPN doesn't detect certificate in the same folder as the config file.
Summary: OpenVPN doesn't detect certificate in the same folder as the config file.
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: openvpn
Version: 23
Hardware: Unspecified
OS: Other
unspecified
unspecified
Target Milestone: ---
Assignee: Gwyn Ciesla
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-07-30 00:37 UTC by Pinkie Pie
Modified: 2015-08-14 07:54 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-08-14 07:54:07 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Workaround (88 bytes, text/plain)
2015-07-30 00:37 UTC, Pinkie Pie
no flags Details

Description Pinkie Pie 2015-07-30 00:37:36 UTC
Created attachment 1057468 [details]
Workaround

Description of problem:
When trying to connect to a vpn (with the cli using "openvpn --config xxx.xxx" and the network manager), it just fail if the working dir is not the same as the config file and the path is not the full path (exemple: ca ca/crt is not working when ca /home/xxx/ca.crt works fine). Weird thing: it worked once but when I killed openvpn (using pkill), it didn't worked anymore. I have the same problem using the networkmanager and an imported config file.

Steps to Reproduce:
1.Make a fresh install of Fedora 23
2.Connect to a vpn through openvpn cli
3.kill openvpn using pkill
4.Try to reconnect

Actual results:
[pinkie@linux ~]$ openvpn --config VPN/SE1-Suède.ovpn
Thu Jul 30 02:30:41 2015 Option 'nobind' in VPN/SE1-Suède.ovpn:20 is ignored by previous <connection> blocks 
Options error: --ca fails with 'ca.crt': No such file or directory
Options error: --tls-auth fails with 'ta.key': No such file or directory
Options error: Please correct these errors.
Use --help for more information.


Expected results:
Connection to the vpn

Additional info:
I'm pretty sure it's an issue involving killing openvpn using pkill. Also I tried to remove openvpn but I'm new to fedora so I don't know how to flush config files etc... (like an apt-get remove --purge)

Also, with the script attached to the bug, I have no problems.

Sorry for my poor english btw :(

Comment 1 Ed Greshko 2015-08-11 04:13:17 UTC
This issue has been discussed on the "Users" list and the problem identified thus far has been putting the certs in directories lacking the proper selinux contexts for certs.

Comment 2 Pinkie Pie 2015-08-14 07:54:07 UTC
Resolved.


Note You need to log in before you can comment on or make changes to this bug.