Fedora Account System
Red Hat Associate
Red Hat Customer
Since OpenVPN 2.5, the recommendation is to use parameter "data-ciphers" instead of "cipher". nm-openvpn has a problem with this new parameter and requires the use of the original "cipher". It is possible that the bug is in the GUI configuration importer (parser). To set up the OpenVPN client I use Settings -> Network -> Add VPN -> Import form file... in Gnome. Standard Fedora Workstation 41 with Gnome Reproducible: Always Steps to Reproduce: Parameter "data-ciphers AES-256-GCM" in a client config file Actual Results: led 14 10:08:37 xxx.local nm-openvpn[19797]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers. led 14 10:08:37 xxx.local nm-openvpn[19797]: OpenVPN 2.6.12 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] Expected Results: Connecting
Hello Please, update the version in repo. This bug fixed in 1.12.2
FEDORA-2025-7bd7950adb (NetworkManager-openvpn-1.12.3-1.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-7bd7950adb
I have submitted an update to 1.12.3, but only for Fedora 42 and EPEL 10 (F43 and Rawhide already had this version). Fedora 41 is near its end of life, so better to leave it out. F42: https://bodhi.fedoraproject.org/updates/FEDORA-2025-7bd7950adb EPEL 10: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-2b7a5f3344
Thanks!
FEDORA-2025-7bd7950adb has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7bd7950adb` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-7bd7950adb See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-7bd7950adb (NetworkManager-openvpn-1.12.3-1.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.