Bug 460730 - Unable to establish vpn connection
Summary: Unable to establish vpn connection
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager-openvpn
Version: 9
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 464431 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-08-30 12:47 UTC by Alexey Kuznetsov
Modified: 2008-10-04 20:16 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2008-10-03 22:33:55 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Alexey Kuznetsov 2008-08-30 12:47:34 UTC
[axet@axet-laptop ~]$ rpm -qa|grep Network
NetworkManager-gnome-0.7.0-0.11.svn4022.fc9.i386
NetworkManager-glib-0.7.0-0.11.svn4022.fc9.i386
NetworkManager-openvpn-0.7.0-15.svn4027.fc9.i386
NetworkManager-devel-0.7.0-0.11.svn4022.fc9.i386
NetworkManager-0.7.0-0.11.svn4022.fc9.i386
[axet@axet-laptop ~]$ 



Aug 30 16:27:24 localhost NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Aug 30 16:27:24 localhost NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3679
Aug 30 16:27:24 localhost kernel: tun: Universal TUN/TAP device driver, 1.6
Aug 30 16:27:24 localhost kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk>
Aug 30 16:27:24 localhost NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Aug 30 16:27:24 localhost NetworkManager: <info>  VPN plugin state changed: 3
Aug 30 16:27:24 localhost NetworkManager: <info>  VPN connection 'cognitive.ru' (Connect) reply received.
Aug 30 16:27:24 localhost NetworkManager: <WARN>  nm_vpn_connection_connect_cb(): VPN connection 'cognitive.ru' failed to connect: 'invalid address 'local-ip''.
Aug 30 16:27:24 localhost NetworkManager: <WARN>  connection_state_changed(): Could not process the request because no VPN connection was active.
Aug 30 16:27:29 localhost NetworkManager: <info>  VPN plugin state changed: 3
Aug 30 16:27:29 localhost NetworkManager: <info>  VPN connection 'cognitive.ru' (Connect) reply received.
Aug 30 16:27:29 localhost NetworkManager: <WARN>  nm_vpn_connection_connect_cb(): VPN connection 'cognitive.ru' failed to connect: 'invalid address 'local-ip''.
Aug 30 16:27:29 localhost NetworkManager: <WARN>  connection_state_changed(): Could not process the request because no VPN connection was active.
Aug 30 16:28:16 localhost NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Aug 30 16:28:16 localhost NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3750
Aug 30 16:28:16 localhost NetworkManager: <info>  VPN service 'org.freedesktop.N
etworkManager.openvpn' just appeared, activating connections
Aug 30 16:28:17 localhost NetworkManager: <info>  VPN plugin state changed: 3
Aug 30 16:28:17 localhost NetworkManager: <info>  VPN connection 'cognitive.ru' (Connect) reply received.
Aug 30 16:28:17 localhost NetworkManager: <WARN>  nm_vpn_connection_connect_cb(): VPN connection 'cognitive.ru' failed to connect: 'invalid address 'local-ip''.
Aug 30 16:28:17 localhost NetworkManager: <WARN>  connection_state_changed(): Could not process the request because no VPN connection was active.
Aug 30 16:29:07 localhost NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Aug 30 16:29:07 localhost NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3766
Aug 30 16:29:07 localhost NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Aug 30 16:29:07 localhost NetworkManager: <info>  VPN plugin state changed: 1
Aug 30 16:29:07 localhost NetworkManager: <info>  VPN plugin state changed: 3
Aug 30 16:29:07 localhost NetworkManager: <info>  VPN connection 'cognitive.ru' (Connect) reply received.
Aug 30 16:29:07 localhost NetworkManager: <WARN>  nm_vpn_connection_connect_cb(): VPN connection 'cognitive.ru' failed to connect: 'invalid address 'local-ip''.
Aug 30 16:29:09 localhost kernel: appletouch: 17" model detected.
Aug 30 16:44:45 localhost kernel: usb 2-1: USB disconnect, address 2

Comment 1 Dan Williams 2008-09-30 20:09:56 UTC
*** Bug 464431 has been marked as a duplicate of this bug. ***

Comment 2 Dan Williams 2008-09-30 20:11:04 UTC
actually an NM bug that was fixed upstream; will backport

Comment 3 Fedora Update System 2008-10-01 13:26:58 UTC
NetworkManager-0.7.0-0.11.svn4022.3.fc8 has been submitted as an update for Fedora 8.
http://admin.fedoraproject.org/updates/NetworkManager-0.7.0-0.11.svn4022.3.fc8

Comment 4 Fedora Update System 2008-10-01 13:28:25 UTC
NetworkManager-0.7.0-0.11.svn4022.3.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/NetworkManager-0.7.0-0.11.svn4022.3.fc9

Comment 5 Fedora Update System 2008-10-01 22:14:24 UTC
NetworkManager-0.7.0-0.11.svn4022.4.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/NetworkManager-0.7.0-0.11.svn4022.4.fc9

Comment 6 Fedora Update System 2008-10-01 22:14:26 UTC
NetworkManager-0.7.0-0.11.svn4022.4.fc8 has been submitted as an update for Fedora 8.
http://admin.fedoraproject.org/updates/NetworkManager-0.7.0-0.11.svn4022.4.fc8

Comment 7 Sean E. Millichamp 2008-10-02 02:26:46 UTC
I installed and tested NetworkManager-0.7.0-0.11.svn4022.4.fc9 and I seem to still be having problems, but with a different error:

Oct  1 21:52:58 sewt NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Oct  1 21:52:58 sewt NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3737
Oct  1 21:52:58 sewt NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Oct  1 21:52:58 sewt NetworkManager: <info>  VPN plugin state changed: 1
Oct  1 21:52:58 sewt NetworkManager: <info>  VPN plugin state changed: 3
Oct  1 21:52:58 sewt nm-openvpn[3741]: OpenVPN 2.1_rc8 i386-redhat-linux-gnu [SSL] [LZO2] [EPOLL] built on Jun 14 2008
Oct  1 21:52:58 sewt NetworkManager: <info>  VPN connection 'VPN' (Connect) reply received.
Oct  1 21:52:58 sewt nm-openvpn[3741]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Oct  1 21:52:58 sewt nm-openvpn[3741]: Cannot load private key file /etc/openvpn/laptop070108.key: error:0B080074:x509 certificate routines:X509_check_private_key:key values mism
atch
Oct  1 21:52:58 sewt nm-openvpn[3741]: Error: private key password verification failed
Oct  1 21:52:58 sewt nm-openvpn[3741]: Exiting

The same key/cert files work when defined under the older NetworkManager-0.7.0-0.9.4.svn3675.fc9 so I have reverted back again.

Comment 8 Dan Williams 2008-10-02 20:11:18 UTC
Sean; can you check out the connection in the connection editor (in svn4022.4 and openvpn -16) and ensure that the certificates and private keys are correct?

Comment 9 Steven W. Carter 2008-10-02 20:20:23 UTC
I had the same issue but didn't report it because I saw that Sean already had.  My certificates and key were correct.

Comment 10 Steven W. Carter 2008-10-02 20:29:42 UTC
To be more clear, I also was unable to connect to the VPN with the exact same errors that Sean was receiving.  I'm certain that the certificates and keys are correct.

Comment 11 Sean E. Millichamp 2008-10-02 20:36:02 UTC
It might be useful to note that Steven and I both connect to the same OpenVPN server but have each independently defined our own connection profiles (no import or other duplication used).

Comment 12 Fedora Update System 2008-10-03 22:33:48 UTC
NetworkManager-0.7.0-0.11.svn4022.4.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 13 Fedora Update System 2008-10-03 22:35:48 UTC
NetworkManager-0.7.0-0.11.svn4022.4.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 14 Ingvar Hagelund 2008-10-04 19:59:57 UTC
This is a bit strange. My openvpn connection as configured in nm-applet stopped working a while ago. So I built a client.conf that worked with manually, that is non-NetworkManager, openvpn startup. It worked without problems. After the update to NetworkManager-0.7.0-0.11.svn4022.4.fc9, I took that client file and imported it using the NetworkManager applet gui. The new connection worked without problems. Rejoice! I then looked at the configuration panels in the applet gui. I was not able to detect any differences between the two configurations. I tried to export that old configuration to a file to look at the diff. That operation failed with "unknown error".

Well, it works now.

Ingvar

Comment 15 Steven W. Carter 2008-10-04 20:16:59 UTC
I can confirm that the latest update has fixed the issue.  As a side note: the ordering of the certificate has been changed compared to previous versions.  This was confusing when I first attempted to point to the proper certificates.


Note You need to log in before you can comment on or make changes to this bug.