OpenVPN/openvpn3-linux
9
20
Fork
You've already forked openvpn3-linux
9

Configurations using --pkcs12 for key/cert/ca are not working #76

Open
opened 2025年08月29日 00:35:43 +02:00 by dazo · 0 comments
Owner
Copy link

Issue is migrated from GitHub

READ THIS CAREFULLY BEFORE ADDING A NEW COMMENT

  1. Does your configuration file use the pkcs12 option? If yes, continue. If not, this issue ticket is not your problem - look up another issue or file a new one.

  2. Can you try starting the session using the openvpn2 command line front-end? If that does not work, this issue ticket is not your problem - look up another issue or file a new one.

  3. If you still do not know if your issue is related to the pkcs12 option, search for pkcs12 in the configuration you have?
    a) Have you imported your configuration using openvpn3 config-import or do you use openvpn3-autoload? Run this command:

     $ openvpn3 config-dump --config $CONFIG_NAME | grep pkcs12

    If this returns nothing, this issue ticket is not your problem - look up another issue or file a new one.

    If you do not know your $CONFIG_NAME, run openvpn3 configs-list and see if you find it there.

    b) If you have your OpenVPN client configuration file saved as a file, run this command:

     $ grep pkcs12 $CONFIG_FILE

    If this returns nothing, this issue ticket is not your problem - look up another issue or file a new one.

If you have discovered that your configuration file does make use of the pkcs12 option, then you can continue reading. Otherwise, this issue ticket is not your problem - look up another issue or file a new one.

I set up a clean install of OpenVPN 3 client on my Ubuntu 18.04 machine. When I run:

sudo openvpn3 session-start --config FILENAME.ovpn

I get the following error:

session-start: ** ERROR ** Failed to start new session: Failed calling D-Bus method Ready: GDBus.Error:net.openvpn.v3.sessions.error: Backend VPN process have died. Session is no longer valid.

This configuration file contains a PKCS#12 file with valid client/ca certs and private key.

Can anyone help figure out what is going wrong here?

Author (GitHub user): Robert-Jan Bruintjes (@rjbruin )
Created: 2020年10月02日T10:56:57Z - Updated: 2025年08月28日T19:57:14Z
GitHub issue: https://github.com/OpenVPN/openvpn3-linux/issues/25

COMMENTS

2020年10月02日T12:56:37Z - @dsommers

Can you first try to start this configuration using the openvpn2 command using --verb 6? Also, you do not need to start VPN sessions as root (even via sudo) with OpenVPN 3 Linux. Unless you really want root to own the VPN session.

Just try this first:

user@host ~ $ openvpn2 --config FILENAME.ovpn --verb 6

The openvpn2 command is emulating the old OpenVPN 2.x command line, only supporting most of the client options.

2020年10月02日T13:34:27Z - @rjbruin

Thanks for the quick reply!

When I use openvpn2 I get a different, also confusing, error: pyOpenSSL library is not installed. Cannot parse PKCS#12 files.

I've checked (using pip, also using python then import OpenSSL), but I do have pyOpenSSL installed in my Python environment (both python2 and python).

2020年10月02日T14:05:57Z - @dsommers

You need the Python 3 packaging for these dependencies. python is just pointing at your python2 environment. python3 is "independent" of the Python 2.x installation.

So check for python3 packages and use pip3 if you don't find it via apt. I believe you might need python3-openssl on Ubuntu 18.04.

2020年10月02日T14:09:54Z - @dsommers

Btw, are you installing OpenVPN 3 Linux from the apt repositories, or have you done a build yourself?

Details here: https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux

2020年10月02日T15:43:50Z - @rjbruin

Btw, are you installing OpenVPN 3 Linux from the apt repositories, or have you done a build yourself?

From the APT repositories. I followed the instructions from that page, under "Pre-built packages" -> "Debian, Ubuntu".

You need the Python 3 packaging for these dependencies. python is just pointing at your python2 environment. python3 is "independent" of the Python 2.x installation.

I actually mapped python to python3. My bad, should have mentioned. But this did actually get me further, because I realized I installed PyOpenSSL for Python 2, not for Python 3.

Now there seems to be an incompatibility of some sort in my config file. The new error message is:

/usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM`

2020年10月02日T16:08:43Z - @dsommers

I actually mapped python to python3. My bad, should have mentioned. But this did actually get me further, because I realized I installed PyOpenSSL for Python 2, not for Python 3.

In regards to openvpn2 that shouldn't change anything, as it should be hard-coded to use python3.

Now there seems to be an incompatibility of some sort in my config file. The new error message is:

/usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM`

Ouch! That's not your fault. That's actually something missing in the config parser in the openvpn3 python module. Okay, so this approach didn't work as smooth as it usually does. Lets go to plan B.

Have two terminals handy. In the first one, we will start a process watching for logs:

 user@host: ~ $ openvpn3 log --log-level 6 --config FILENAME.ovpn

In the second terminal, run this:

 user@host: ~ $ openvpn3 session-start --config FILENAME.ovpn

(the openvpn2 approach would result in the same, but with a single command)

2020年10月03日T09:04:57Z - @rjbruin

Output of session-start:

Using configuration profile from file: FILENAME.ovpn
Session path: /net/openvpn/v3/sessions/8de70a1bse232s46a5sac7csf08a030b7ddf
session-start: ** ERROR ** Failed to start new session: Failed calling D-Bus method Ready: GDBus.Error:net.openvpn.v3.sessions.error: Backend VPN process have died. Session is no longer valid.

Output of log:

Waiting for session to start ... Done
Attaching to session /net/openvpn/v3/sessions/8de70a1bse232s46a5sac7csf08a030b7ddf
** ERROR ** Failed setting new property value on 'receive_log_events': Failed to retrieve unique bus ID for bus name 'net.openvpn.v3.backends.be7541': Failed calling D-Bus method GetNameOwner: Could not get owner of name 'net.openvpn.v3.backends.be7541': no such name

2020年10月03日T14:11:20Z - @dsommers

Okay, this makes it a bit clearer. It's the openvpn3-service-client crashing. The challenge now is to figure out why. I'll get back to you over the weekend with some approaches to debug this better.

If you feel adventurous doing some debugging on your own in the meantime, have a look here: https://github.com/OpenVPN/openvpn3-linux/blob/master/docs/debugging.md ... The best is if you are able to enable and track down some coredumps or a backtrace of the crash, but I don't quite remember how that works on Ubuntu.

2020年10月06日T11:50:58Z - @rjbruin

I've managed to install openvpn with the debugging options enabled, but I'm kind of lost with the debugging instructions.

2020年10月06日T12:55:00Z - @dsommers

Good! So I've put together a pretty simple debug helper script in Python. First, you need to import the configuration profile you want to test with. This debug script does not support configurations requiring username/passwords. If your config requires that, let me know and I'll expand this script to provide this information as well.

First, import the configuration profile:

 [user@host ~]$ openvpn3 config-import --config FILENAME.ovpn --name CONFIGNAME

Then save the script below:

#!/usr/bin/python3
import sys
import os
import time
import dbus
import openvpn3
if len(sys.argv) != 2:
 print("Usage: %s <pre-imported config name>" % sys.argv[0])
 sys.exit(1)
# Get a connection to the D-Bus System Bus
sysbus = dbus.SystemBus()
# Get a connection to the Config Manager and retrieve
# a configuration object representing this config
cfgmgr = openvpn3.ConfigurationManager(sysbus)
cfgpaths = cfgmgr.LookupConfigName(sys.argv[1])
if len(cfgpaths) == 0:
 print("No configuration profile found")
 sys.exit(1)
elif len(cfgpaths) > 1:
 print("More than one configuration profile found using the first match")
print("Retrieving configuration profile from %s" % cfgpaths[0])
cfg = cfgmgr.Retrieve(cfgpaths[0])
# Connecting to the Session Manager and starting a new tunnel session
sesmgr = openvpn3.SessionManager(sysbus)
session = sesmgr.NewTunnel(cfg)
time.sleep(1) # Simplistic method to ensure the backend client settles
print("New VPN session initiated: %s" % session.GetPath())
pid = int(session.GetProperty("backend_pid"))
host = os.uname().nodename.split('.')[0]
print("Backend client PID: %i\n" % pid)
print("In a different terminal, run the following command as root:\n")
print(" [root@%s ~]# gdb --pid %i\n" % (host, pid))
print("Inside this debugger command prompt, type: 'continue'\n")
print(" (gdb) continue\n")
input("When this is done, hit [ENTER] in this terminal ... ")
print("\nStarting VPN session ...")
session.Ready()
session.Connect()
print("Connecting, session status: %s" % str(session.GetStatus()))
time.sleep(5)
print("Session status: %s" % str(session.GetStatus()))
input("Hit [ENTER] to disconnect and shutdown session ... ")
session.Disconnect()

To use this script, let's say you named it ovpn3-debug.py:

 [user@host ~]$ python3 ovpn3-debug.py CONFIGNAME
 Retrieving configuration profile from /net/openvpn/v3/configuration/4a779694x7a84x402fxad2exdf348d99c303
 New VPN session initiated: /net/openvpn/v3/sessions/96ef5bb7sa909s4c9dsb568sb4b66df5295b
 Backend client PID: 19304
 In a different terminal, run the following command as root:
 [root@optimus ~] # gdb --pid 19304
 Inside this debugger command prompt, type: 'continue'
 (gdb) continue
 When this is done, hit [ENTER] in this terminal ...

Do what this script instructs you to do, and hit [ENTER]. It is important that you run gdb with root privleges, otherwise you cannot attach a debugger to the openvpn3-service-client process. I do expect your gdb terminal to bail out with a crash. When that happens, type: thread apply all bt and copy-paste everything you see from the beginning of the gdb command to this ticket.

2020年10月06日T12:56:15Z - @rjbruin

Thanks for the very extensive instructions! The connection does indeed require username & password however...

2020年10月06日T13:08:48Z - @dsommers

No worries, here's an updated debug script which will expect user credentials to be provided:

#!/usr/bin/python3
import sys
import os
import time
import getpass
import dbus
import openvpn3
if len(sys.argv) != 2:
 print("Usage: %s <pre-imported config name>" % sys.argv[0])
 sys.exit(1)
# Get a connection to the D-Bus System Bus
sysbus = dbus.SystemBus()
# Get a connection to the Config Manager and retrieve
# a configuration object representing this config
cfgmgr = openvpn3.ConfigurationManager(sysbus)
cfgpaths = cfgmgr.LookupConfigName(sys.argv[1])
if len(cfgpaths) == 0:
 print("No configuration profile found")
 sys.exit(1)
elif len(cfgpaths) > 1:
 print("More than one configuration profile found using the first match")
print("Retrieving configuration profile from %s" % cfgpaths[0])
cfg = cfgmgr.Retrieve(cfgpaths[0])
# Connecting to the Session Manager and starting a new tunnel session
sesmgr = openvpn3.SessionManager(sysbus)
session = sesmgr.NewTunnel(cfg)
time.sleep(1) # Simplistic method to ensure the backend client settles
# Provide user credentials
for uislot in session.FetchUserInputSlots():
 if uislot.GetInputMask():
 val = getpass.getpass("%s: " % uislot.GetLabel())
 else:
 val = input("%s: " % uislot.GetLabel())
 uislot.ProvideInput(val)
print("\nNew VPN session initiated: %s" % session.GetPath())
pid = int(session.GetProperty("backend_pid"))
host = os.uname().nodename.split('.')[0]
print("Backend client PID: %i\n" % pid)
print("In a different terminal, run the following command as root:\n")
print(" [root@%s ~]# gdb --pid %i\n" % (host, pid))
print("Inside this debugger command prompt, type: 'continue'\n")
print(" (gdb) continue\n")
input("When this is done, hit [ENTER] in this terminal ... ")
print("\nStarting VPN session ...")
session.Ready()
session.Connect()
print("Connecting, session status: %s" % str(session.GetStatus()))
time.sleep(5)
print("Session status: %s" % str(session.GetStatus()))
input("Hit [ENTER] to disconnect and shutdown session ... ")
session.Disconnect()

2020年10月06日T14:06:31Z - @rjbruin

Here we go. The output of the debug script:

Starting VPN session ...
Traceback (most recent call last):
 File "./magicscript.py", line 47, in <module>
 session.Connect()
 File "/usr/lib/python3.6/site-packages/openvpn3/SessionManager.py", line 138, in __delete_checker
 return func(self, *args, **kwargs)
 File "/usr/lib/python3.6/site-packages/openvpn3/SessionManager.py", line 188, in Connect
 self.__session_intf.Connect()
 File "/usr/lib/python3/dist-packages/dbus/proxies.py", line 145, in __call__
 **keywords)
 File "/usr/lib/python3/dist-packages/dbus/connection.py", line 651, in call_blocking
 message, timeout)
dbus.exceptions.DBusException: org.gtk.GDBus.UnmappedGError.Quark._g_2dio_2derror_2dquark.Code36: GDBus.Error:net.openvpn.v3.sessions.error: Failed communicating with VPN backend: Failed calling D-Bus method Connect: GDBus.Error:net.openvpn.v3.backend.error.standard: Failed executing D-Bus call 'Connect': Configuration pre-parsing failed: option_error: option <pkcs12> was not properly closed out

The gdb terminal did actually not crash. It stays at Continuing.

2020年10月06日T14:11:04Z - @dsommers

Wow! That's interesting! But at least now we have an error which makes some sense. And there more issues being triggered in parallel. The trigger point is here:

 Configuration pre-parsing failed: option_error: option <pkcs12> was not properly closed out

The --pkcs12 feature has not been thoroughly tested, so it is definitely related to this.

Could you try to run this config against the classic OpenVPN 2.x and see if that behaves as expected?

2020年10月06日T14:15:16Z - @rjbruin

I believe I did this, before we went through the debugging route: https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702808072

I got this error then, and the same now:

/usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM`

I don't think I can run openvpn2 with the debugging tools, right? Since your script initiates the session, instead of using the command-line API.

2020年10月06日T14:26:42Z - @dsommers

Ahh, the openvpn2 command is not the same as the classic OpenVPN 2.x version. The openvpn2 command is provided by openvpn3-linux. You need the one provided by apt install openvpn and use the openvpn command.

2020年10月06日T14:34:42Z - @rjbruin

I wasn't aware. My apologies!

With openvpn, I can connect to the server. :)

2020年10月06日T14:45:38Z - @dsommers

Alright, so the configuration file is not corrupt. I'll run some more testing with --pkcs12.

2021年02月19日T13:26:38Z - @adboyarshinov

Hello, I faced the same problem when trying to run openvpn3 inside docker.

With openvpn, I can connect to the server. :)

But when I use openvpn --config config_file.ovpn --verb 6
It fails with Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)
To fix this I've added

mkdir -p /dev/net
mknod /dev/net/tun c 10 200
chmod 600 /dev/net/tun

to Dockerfile
And now it fails with Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
Can you give me advice that should I do to fix this?

Docker image adoptopenjdk/openjdk11:jdk-11.0.9.1_1-ubuntu

Distributor ID: Ubuntu
Description: Ubuntu 20.04.1 LTS
Release: 20.04
Codename: focal

2021年02月19日T14:22:33Z - @dsommers

Hello, I faced the same problem when trying to run openvpn3 inside docker.

With openvpn, I can connect to the server. :)

But when I use openvpn --config config_file.ovpn --verb 6
It fails with Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)

This is confusing. This issue is not about running OpenVPN 3 Linux in Docker. In addition, you talk about openvpn which is the OpenVPN 2.x version, not OpenVPN 3 Linux. And running OpenVPN (any version) inside a Docker container is a questionable use case to start with. But that is not something we will discuss in this ticket.

This issue is about PKCS12 files not being handled correctly in the OpenVPN 3 Python module. Please stay on topic within in the issue tickets.

2021年07月09日T22:19:55Z - @dsommers

PLEASE STAY ON TOPIC - THIS IS ABOUT PKCS12 CERTIFICATE/PRIVATE KEY BUNDLES

2021年08月24日T20:27:59Z - @benfreefly

Was there ever any progress on this? I'm having the exact same issues and identical errors when trying the debug steps in previous comments. I can also connect using openvpn but not openvpn3. It may be coincidence, but I had a router failure and this issue started after I replaced it -- however I tried purging/reinstalling both openvpn and openvpn3 (via apt) as well as removing and re-adding my configs after fixing the router and neither had any effect. I am on Ubuntu 20.04.

2021年08月26日T16:25:49Z - @dsommers

@benfreefly Does your configuration profile contain --pkcs12 ? If yes, then this is not properly solved yet.

2022年01月11日T05:53:39Z - @coolgoel18

Hi All, I faced the same problem [https://github.com/OpenVPN/openvpn3-linux/issues/25#issue-713533453]. What worked for me was to simply downgrade the openvpn3 version to 13.
This is the command for Ubuntu 20.04: sudo apt install openvpn3=13~beta-1+focal
I haven't checked for other Distros but should work fine by replacing with the distro name which can be found on OpenVpn official website
Thanks!

2022年01月11日T10:38:13Z - @dsommers

Hi All, I faced the same problem What worked for me was to simply downgrade the openvpn3 version to 13. This is the command for Ubuntu 20.04: sudo apt install openvpn3=13~beta-1+focal I haven't checked for other Distros but should work fine by replacing with the distro name which can be found on OpenVpn official website Thanks!

@coolgoel18 This doesn't make sense. --pkcs12 option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the OpenVPN 3 Core library. Using the openvpn2 command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the .pkcs12 file into separate .pem files for certificates, keys and CA certificate.

2022年01月15日T09:01:36Z - @coolgoel18

Hi All, I faced the same problem What worked for me was to simply downgrade the openvpn3 version to 13. This is the command for Ubuntu 20.04: sudo apt install openvpn3=13~beta-1+focal I haven't checked for other Distros but should work fine by replacing with the distro name which can be found on OpenVpn official website Thanks!

@coolgoel18 This doesn't make sense. --pkcs12 option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the OpenVPN 3 Core library. Using the openvpn2 command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the .pkcs12 file into separate .pem files for certificates, keys and CA certificate.

Hey man! I went through the convo above when I faced the issue, you definitely know a lot about openvpn. I am just mentioning a solution which I found on stackoverflow, not necessarily the exact solution for this thread but since I came across this thread and a solution worked for me I posted. BTW I am using wsl and if you face daemon bus issue you can start the dbus using
sudo service dbus start
I really don't know the technicalities but this worked for me so just posting it here for what its worth.
cheers!

2022年01月17日T11:07:40Z - @dsommers

To the next commenter

Have you read carefully the initial issue comment? Have you verified your configuration does contain pkcs12? If no, do that first.

2023年11月13日T04:01:34Z - @waggyman

From @dsommers comment.

@coolgoel18 This doesn't make sense. --pkcs12 option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the OpenVPN 3 Core library. Using the openvpn2 command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the .pkcs12 file into separate .pem files for certificates, keys and CA certificate.

using openvpn2 command line wrapper for OpenVPN3 solved my problem of CA Not Defined when using .p12 file.

Thanks 👍

2023年11月13日T08:59:56Z - @dsommers

I wrapped together a quick Python script now, which can import configuration profiles (a variant of openvpn3 config-import --persistent). I'll add that to the source repo in the nearer future as well; but here's a copy of it - only lightly tested.

#!/usr/bin/python3
#
# OpenVPN 3 Linux client -- Next generation OpenVPN client
#
# SPDX-License-Identifier: AGPL-3.0-only
#
# Copyright (C) 2017 - 2023 OpenVPN Inc <sales@openvpn.net>
# Copyright (C) 2017 - 2023 David Sommerseth <davids@openvpn.net>
#
#
# Another Python implementation of importing a configuration profile.
# This approach uses the openvpn3 Python to get a real configuration
# profile to use for the import (via the openvpn3.ConfigParser) and
# imports it using the openvpn3.ConfigurationManager.
#
# Use this as: ./configimport2.py CONFIG_NAME <openvpn 2 options>
# Example: ./configimport2.py my-config --config /path/to/config.ovpn --verb 6
#
import dbus
import openvpn3
import sys
# Simple argument pre-checks
if sys.argv[1] in ['--help','-h']:
 openvpn3.ConfigParser(sys.argv, 'Imports a configuration profile')
 sys.exit(0)
 
if len(sys.argv) < 3:
 print('** ERROR ** Too few arguments')
 print('Usage: %s CONFIG_NAME <openvpn options....>')
 sys.exit(1)
# Parse the configuration
config_name = sys.argv[1]
parser_args = [sys.argv[0],] + sys.argv[2:]
cfgparser = openvpn3.ConfigParser(parser_args, 'Imports a configuration profile')
cfgparser.SanityCheck()
config_profile = cfgparser.GenerateConfig()
# Get a connection to the system bus
bus = dbus.SystemBus()
# Get a connection to the OpenVPN 3 Configuration Manager
config_mgr = openvpn3.ConfigurationManager(bus)
# Import the configuration as a multi-use, persistent configuration profile
config = config_mgr.Import(config_name, config_profile, False, True)
print('Configuration "%s" imported' % config_name)
print('Configuration path: ' + config.GetPath())

This will appear as src/tests/python/configimport2.py once committed and pushed.

*Issue is migrated from GitHub* ------ ### READ THIS CAREFULLY BEFORE ADDING A NEW COMMENT 1. Does your configuration file use the `pkcs12` option? If yes, continue. If not, this issue ticket is **not** your problem - look up another issue or file a new one. 2. Can you try starting the session using the `openvpn2` command line front-end? If that does **not** work, **this** issue ticket is **not** your problem - look up another issue or file a new one. 3. If you still do not know if your issue is related to the `pkcs12` option, search for `pkcs12` in the configuration you have? a) Have you imported your configuration using `openvpn3 config-import` or do you use `openvpn3-autoload`? Run this command: $ openvpn3 config-dump --config $CONFIG_NAME | grep pkcs12 If this returns nothing, **this issue ticket is _not_ your problem** - look up another issue or file a new one. If you do not know your `$CONFIG_NAME`, run `openvpn3 configs-list` and see if you find it there. b) If you have your OpenVPN client configuration file saved as a file, run this command: $ grep pkcs12 $CONFIG_FILE If this returns nothing, **this issue ticket is _not_ your problem** - look up another issue or file a new one. If you have discovered that your configuration file **does make use of the `pkcs12` option**, then you can continue reading. _Otherwise, this issue ticket is not your problem_ - look up another issue or file a new one. --------------------------- I set up a clean install of OpenVPN 3 client on my Ubuntu 18.04 machine. When I run: ```bash sudo openvpn3 session-start --config FILENAME.ovpn ``` I get the following error: ``` session-start: ** ERROR ** Failed to start new session: Failed calling D-Bus method Ready: GDBus.Error:net.openvpn.v3.sessions.error: Backend VPN process have died. Session is no longer valid. ``` This configuration file contains a PKCS#12 file with valid client/ca certs and private key. Can anyone help figure out what is going wrong here? ------ Author (GitHub user): **Robert-Jan Bruintjes** (**[@rjbruin](https://github.com/rjbruin)**) Created: **2020年10月02日T10:56:57Z** - Updated: **2025年08月28日T19:57:14Z** GitHub issue: https://github.com/OpenVPN/openvpn3-linux/issues/25 ## COMMENTS > **[2020年10月02日T12:56:37Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702718416) - [@dsommers](https://github.com/dsommers)** > > Can you first try to start this configuration using the `openvpn2` command using `--verb 6`? Also, you do not need to start VPN sessions as root (even via `sudo`) with OpenVPN 3 Linux. Unless you really want `root` to own the VPN session. > > Just try this first: > > user@host ~ $ openvpn2 --config FILENAME.ovpn --verb 6 > > The [`openvpn2`](https://github.com/OpenVPN/openvpn3-linux/blob/master/docs/man/openvpn2.1.rst) command is emulating the old OpenVPN 2.x command line, only supporting most of the client options. ----- > **[2020年10月02日T13:34:27Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702737306) - [@rjbruin](https://github.com/rjbruin)** > > Thanks for the quick reply! > > When I use `openvpn2` I get a different, also confusing, error: `pyOpenSSL library is not installed. Cannot parse PKCS#12 files.` > > I've checked (using `pip`, also using `python` then `import OpenSSL`), but I do have pyOpenSSL installed in my Python environment (both `python2` and `python`). ----- > **[2020年10月02日T14:05:57Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702754069) - [@dsommers](https://github.com/dsommers)** > > You need the Python 3 packaging for these dependencies. `python` is just pointing at your `python2` environment. `python3` is "independent" of the Python 2.x installation. > > So check for `python3` packages and use `pip3` if you don't find it via `apt`. I believe you might need `python3-openssl` on Ubuntu 18.04. ----- > **[2020年10月02日T14:09:54Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702756114) - [@dsommers](https://github.com/dsommers)** > > Btw, are you installing OpenVPN 3 Linux from the apt repositories, or have you done a build yourself? > > Details here: https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux ----- > **[2020年10月02日T15:43:50Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702808072) - [@rjbruin](https://github.com/rjbruin)** > > > Btw, are you installing OpenVPN 3 Linux from the apt repositories, or have you done a build yourself? > > From the APT repositories. I followed the instructions from that page, under "Pre-built packages" -> "Debian, Ubuntu". > > > You need the Python 3 packaging for these dependencies. `python` is just pointing at your `python2` environment. `python3` is "independent" of the Python 2.x installation. > > I actually mapped `python` to `python3`. My bad, should have mentioned. But this did actually get me further, because I realized I installed PyOpenSSL for Python 2, not for Python 3. > > Now there seems to be an incompatibility of some sort in my config file. The new error message is: > ``` > /usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM` > ``` ----- > **[2020年10月02日T16:08:43Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702821238) - [@dsommers](https://github.com/dsommers)** > > > > > > > > I actually mapped `python` to `python3`. My bad, should have mentioned. But this did actually get me further, because I realized I installed PyOpenSSL for Python 2, not for Python 3. > > In regards to `openvpn2` that shouldn't change anything, as it should be hard-coded to use `python3`. > > > > > Now there seems to be an incompatibility of some sort in my config file. The new error message is: > > > > ``` > > /usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM` > > ``` > > Ouch! That's not your fault. That's actually something missing in the config parser in the openvpn3 python module. Okay, so this approach didn't work as smooth as it usually does. Lets go to plan B. > > Have two terminals handy. In the first one, we will start a process watching for logs: > > user@host: ~ $ openvpn3 log --log-level 6 --config FILENAME.ovpn > > In the second terminal, run this: > > user@host: ~ $ openvpn3 session-start --config FILENAME.ovpn > > > (the `openvpn2` approach would result in the same, but with a single command) > ----- > **[2020年10月03日T09:04:57Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-703072752) - [@rjbruin](https://github.com/rjbruin)** > > Output of `session-start`: > > ``` > Using configuration profile from file: FILENAME.ovpn > Session path: /net/openvpn/v3/sessions/8de70a1bse232s46a5sac7csf08a030b7ddf > session-start: ** ERROR ** Failed to start new session: Failed calling D-Bus method Ready: GDBus.Error:net.openvpn.v3.sessions.error: Backend VPN process have died. Session is no longer valid. > ``` > > Output of `log`: > > ``` > Waiting for session to start ... Done > Attaching to session /net/openvpn/v3/sessions/8de70a1bse232s46a5sac7csf08a030b7ddf > ** ERROR ** Failed setting new property value on 'receive_log_events': Failed to retrieve unique bus ID for bus name 'net.openvpn.v3.backends.be7541': Failed calling D-Bus method GetNameOwner: Could not get owner of name 'net.openvpn.v3.backends.be7541': no such name > ``` ----- > **[2020年10月03日T14:11:20Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-703109799) - [@dsommers](https://github.com/dsommers)** > > Okay, this makes it a bit clearer. It's the `openvpn3-service-client` crashing. The challenge now is to figure out why. I'll get back to you over the weekend with some approaches to debug this better. > > If you feel adventurous doing some debugging on your own in the meantime, have a look here: https://github.com/OpenVPN/openvpn3-linux/blob/master/docs/debugging.md ... The best is if you are able to enable and track down some coredumps or a backtrace of the crash, but I don't quite remember how that works on Ubuntu. ----- > **[2020年10月06日T11:50:58Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704216060) - [@rjbruin](https://github.com/rjbruin)** > > I've managed to install `openvpn` with the debugging options enabled, but I'm kind of lost with the debugging instructions. ----- > **[2020年10月06日T12:55:00Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704248995) - [@dsommers](https://github.com/dsommers)** > > Good! So I've put together a pretty simple debug helper script in Python. First, you need to import the configuration profile you want to test with. This debug script does not support configurations requiring username/passwords. If your config requires that, let me know and I'll expand this script to provide this information as well. > > First, import the configuration profile: > > [user@host ~]$ openvpn3 config-import --config FILENAME.ovpn --name CONFIGNAME > > Then save the script below: > ``` > #!/usr/bin/python3 > > import sys > import os > import time > import dbus > import openvpn3 > > if len(sys.argv) != 2: > print("Usage: %s <pre-imported config name>" % sys.argv[0]) > sys.exit(1) > > # Get a connection to the D-Bus System Bus > sysbus = dbus.SystemBus() > > # Get a connection to the Config Manager and retrieve > # a configuration object representing this config > cfgmgr = openvpn3.ConfigurationManager(sysbus) > cfgpaths = cfgmgr.LookupConfigName(sys.argv[1]) > if len(cfgpaths) == 0: > print("No configuration profile found") > sys.exit(1) > elif len(cfgpaths) > 1: > print("More than one configuration profile found using the first match") > > print("Retrieving configuration profile from %s" % cfgpaths[0]) > cfg = cfgmgr.Retrieve(cfgpaths[0]) > > > # Connecting to the Session Manager and starting a new tunnel session > sesmgr = openvpn3.SessionManager(sysbus) > session = sesmgr.NewTunnel(cfg) > time.sleep(1) # Simplistic method to ensure the backend client settles > > print("New VPN session initiated: %s" % session.GetPath()) > pid = int(session.GetProperty("backend_pid")) > host = os.uname().nodename.split('.')[0] > print("Backend client PID: %i\n" % pid) > print("In a different terminal, run the following command as root:\n") > print(" [root@%s ~]# gdb --pid %i\n" % (host, pid)) > print("Inside this debugger command prompt, type: 'continue'\n") > print(" (gdb) continue\n") > input("When this is done, hit [ENTER] in this terminal ... ") > > print("\nStarting VPN session ...") > session.Ready() > session.Connect() > print("Connecting, session status: %s" % str(session.GetStatus())) > time.sleep(5) > print("Session status: %s" % str(session.GetStatus())) > > input("Hit [ENTER] to disconnect and shutdown session ... ") > session.Disconnect() > ``` > > To use this script, let's say you named it `ovpn3-debug.py`: > > [user@host ~]$ python3 ovpn3-debug.py CONFIGNAME > Retrieving configuration profile from /net/openvpn/v3/configuration/4a779694x7a84x402fxad2exdf348d99c303 > New VPN session initiated: /net/openvpn/v3/sessions/96ef5bb7sa909s4c9dsb568sb4b66df5295b > Backend client PID: 19304 > > In a different terminal, run the following command as root: > > [root@optimus ~] # gdb --pid 19304 > > Inside this debugger command prompt, type: 'continue' > > (gdb) continue > > When this is done, hit [ENTER] in this terminal ... > > Do what this script instructs you to do, and hit [ENTER]. It is important that you run `gdb` with root privleges, otherwise you cannot attach a debugger to the `openvpn3-service-client` process. I do expect your `gdb` terminal to bail out with a crash. When that happens, type: `thread apply all bt` and copy-paste everything you see from the beginning of the `gdb` command to this ticket. ----- > **[2020年10月06日T12:56:15Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704249671) - [@rjbruin](https://github.com/rjbruin)** > > Thanks for the very extensive instructions! The connection does indeed require username & password however... ----- > **[2020年10月06日T13:08:48Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704256992) - [@dsommers](https://github.com/dsommers)** > > No worries, here's an updated debug script which will expect user credentials to be provided: > > ``` > #!/usr/bin/python3 > > import sys > import os > import time > import getpass > import dbus > import openvpn3 > > if len(sys.argv) != 2: > print("Usage: %s <pre-imported config name>" % sys.argv[0]) > sys.exit(1) > > # Get a connection to the D-Bus System Bus > sysbus = dbus.SystemBus() > > # Get a connection to the Config Manager and retrieve > # a configuration object representing this config > cfgmgr = openvpn3.ConfigurationManager(sysbus) > cfgpaths = cfgmgr.LookupConfigName(sys.argv[1]) > if len(cfgpaths) == 0: > print("No configuration profile found") > sys.exit(1) > elif len(cfgpaths) > 1: > print("More than one configuration profile found using the first match") > > print("Retrieving configuration profile from %s" % cfgpaths[0]) > cfg = cfgmgr.Retrieve(cfgpaths[0]) > > > # Connecting to the Session Manager and starting a new tunnel session > sesmgr = openvpn3.SessionManager(sysbus) > session = sesmgr.NewTunnel(cfg) > time.sleep(1) # Simplistic method to ensure the backend client settles > > # Provide user credentials > for uislot in session.FetchUserInputSlots(): > if uislot.GetInputMask(): > val = getpass.getpass("%s: " % uislot.GetLabel()) > else: > val = input("%s: " % uislot.GetLabel()) > uislot.ProvideInput(val) > > print("\nNew VPN session initiated: %s" % session.GetPath()) > pid = int(session.GetProperty("backend_pid")) > host = os.uname().nodename.split('.')[0] > print("Backend client PID: %i\n" % pid) > print("In a different terminal, run the following command as root:\n") > print(" [root@%s ~]# gdb --pid %i\n" % (host, pid)) > print("Inside this debugger command prompt, type: 'continue'\n") > print(" (gdb) continue\n") > input("When this is done, hit [ENTER] in this terminal ... ") > print("\nStarting VPN session ...") > session.Ready() > session.Connect() > print("Connecting, session status: %s" % str(session.GetStatus())) > time.sleep(5) > print("Session status: %s" % str(session.GetStatus())) > input("Hit [ENTER] to disconnect and shutdown session ... ") > session.Disconnect() > ``` ----- > **[2020年10月06日T14:06:31Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704293126) - [@rjbruin](https://github.com/rjbruin)** > > Here we go. The output of the debug script: > > ``` > Starting VPN session ... > Traceback (most recent call last): > File "./magicscript.py", line 47, in <module> > session.Connect() > File "/usr/lib/python3.6/site-packages/openvpn3/SessionManager.py", line 138, in __delete_checker > return func(self, *args, **kwargs) > File "/usr/lib/python3.6/site-packages/openvpn3/SessionManager.py", line 188, in Connect > self.__session_intf.Connect() > File "/usr/lib/python3/dist-packages/dbus/proxies.py", line 145, in __call__ > **keywords) > File "/usr/lib/python3/dist-packages/dbus/connection.py", line 651, in call_blocking > message, timeout) > dbus.exceptions.DBusException: org.gtk.GDBus.UnmappedGError.Quark._g_2dio_2derror_2dquark.Code36: GDBus.Error:net.openvpn.v3.sessions.error: Failed communicating with VPN backend: Failed calling D-Bus method Connect: GDBus.Error:net.openvpn.v3.backend.error.standard: Failed executing D-Bus call 'Connect': Configuration pre-parsing failed: option_error: option <pkcs12> was not properly closed out > ``` > > The `gdb` terminal did actually not crash. It stays at `Continuing.` ----- > **[2020年10月06日T14:11:04Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704296057) - [@dsommers](https://github.com/dsommers)** > > Wow! That's interesting! But at least now we have an error which makes some sense. And there more issues being triggered in parallel. The trigger point is here: > > Configuration pre-parsing failed: option_error: option <pkcs12> was not properly closed out > > The `--pkcs12` feature has not been thoroughly tested, so it is definitely related to this. > > Could you try to run this config against the classic OpenVPN 2.x and see if that behaves as expected? ----- > **[2020年10月06日T14:15:16Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704298775) - [@rjbruin](https://github.com/rjbruin)** > > I believe I did this, before we went through the debugging route: https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-702808072 > > I got this error then, and the same now: > > ``` > /usr/bin/openvpn2: error: unrecognized arguments: --ncp-ciphers AES-256-GCM:AES-128-GCM` > ``` > > I don't think I can run `openvpn2` with the debugging tools, right? Since your script initiates the session, instead of using the command-line API. ----- > **[2020年10月06日T14:26:42Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704306503) - [@dsommers](https://github.com/dsommers)** > > Ahh, the `openvpn2` command is not the same as the classic OpenVPN 2.x version. The `openvpn2` command is provided by openvpn3-linux. You need the one provided by `apt install openvpn` and use the `openvpn` command. ----- > **[2020年10月06日T14:34:42Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704311933) - [@rjbruin](https://github.com/rjbruin)** > > I wasn't aware. My apologies! > > With `openvpn`, I can connect to the server. :) ----- > **[2020年10月06日T14:45:38Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-704319375) - [@dsommers](https://github.com/dsommers)** > > Alright, so the configuration file is not corrupt. I'll run some more testing with `--pkcs12`. ----- > **[2021年02月19日T13:26:38Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-782072970) - [@adboyarshinov](https://github.com/adboyarshinov)** > > Hello, I faced the same problem when trying to run openvpn3 inside docker. > > With `openvpn`, I can connect to the server. :) > > > But when I use `openvpn --config config_file.ovpn --verb 6` > It fails with `Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)` > To fix this I've added > ``` > mkdir -p /dev/net > mknod /dev/net/tun c 10 200 > chmod 600 /dev/net/tun > ``` > to Dockerfile > And now it fails with `Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)` > Can you give me advice that should I do to fix this? > > Docker image adoptopenjdk/openjdk11:jdk-11.0.9.1_1-ubuntu > ``` > Distributor ID: Ubuntu > Description: Ubuntu 20.04.1 LTS > Release: 20.04 > Codename: focal > ``` ----- > **[2021年02月19日T14:22:33Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-782105746) - [@dsommers](https://github.com/dsommers)** > > > Hello, I faced the same problem when trying to run openvpn3 inside docker. > > > > > With `openvpn`, I can connect to the server. :) > > > > But when I use `openvpn --config config_file.ovpn --verb 6` > > It fails with `Cannot open TUN/TAP dev /dev/net/tun: No such file or directory (errno=2)` > > This is confusing. **This** issue is **not** about running OpenVPN 3 Linux in Docker. In addition, you talk about `openvpn` which is the OpenVPN 2.x version, not OpenVPN 3 Linux. And running OpenVPN (any version) inside a Docker container is a questionable use case to start with. But that is _not_ something we will discuss in _this_ ticket. > > This issue is about **PKCS12 files** not being handled correctly in the OpenVPN 3 Python module. Please stay on topic within in the issue tickets. ----- > **[2021年07月09日T22:19:55Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-877486040) - [@dsommers](https://github.com/dsommers)** > > ### PLEASE STAY ON TOPIC - THIS IS ABOUT PKCS12 CERTIFICATE/PRIVATE KEY BUNDLES ----- > **[2021年08月24日T20:27:59Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-904951605) - [@benfreefly](https://github.com/benfreefly)** > > Was there ever any progress on this? I'm having the exact same issues and identical errors when trying the debug steps in previous comments. I can also connect using **openvpn** but not **openvpn3**. It may be coincidence, but I had a router failure and this issue started after I replaced it -- however I tried purging/reinstalling both openvpn and openvpn3 (via apt) as well as removing and re-adding my configs after fixing the router and neither had any effect. I am on Ubuntu 20.04. ----- > **[2021年08月26日T16:25:49Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-906559751) - [@dsommers](https://github.com/dsommers)** > > @benfreefly Does your configuration profile contain `--pkcs12` ? If yes, then this is not properly solved yet. ----- > **[2022年01月11日T05:53:39Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1009621782) - [@coolgoel18](https://github.com/coolgoel18)** > > Hi All, I faced the same problem [https://github.com/OpenVPN/openvpn3-linux/issues/25#issue-713533453]. What worked for me was to simply downgrade the openvpn3 version to 13. > This is the command for Ubuntu 20.04: `sudo apt install openvpn3=13~beta-1+focal` > I haven't checked for other Distros but should work fine by replacing <focal> with the distro name which can be found on OpenVpn official website > Thanks! ----- > **[2022年01月11日T10:38:13Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1009831931) - [@dsommers](https://github.com/dsommers)** > > > Hi All, I faced the same problem What worked for me was to simply downgrade the openvpn3 version to 13. This is the command for Ubuntu 20.04: `sudo apt install openvpn3=13~beta-1+focal` I haven't checked for other Distros but should work fine by replacing with the distro name which can be found on OpenVpn official website Thanks! > > @coolgoel18 This doesn't make sense. `--pkcs12` option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the [OpenVPN 3 Core library](https://github.com/openVPN/openvpn3). Using the `openvpn2` command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the `.pkcs12` file into separate `.pem` files for certificates, keys and CA certificate. > ----- > **[2022年01月15日T09:01:36Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1013647214) - [@coolgoel18](https://github.com/coolgoel18)** > > > > Hi All, I faced the same problem What worked for me was to simply downgrade the openvpn3 version to 13. This is the command for Ubuntu 20.04: `sudo apt install openvpn3=13~beta-1+focal` I haven't checked for other Distros but should work fine by replacing with the distro name which can be found on OpenVpn official website Thanks! > > > > @coolgoel18 This doesn't make sense. `--pkcs12` option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the [OpenVPN 3 Core library](https://github.com/openVPN/openvpn3). Using the `openvpn2` command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the `.pkcs12` file into separate `.pem` files for certificates, keys and CA certificate. > > Hey man! I went through the convo above when I faced the issue, you definitely know a lot about openvpn. I am just mentioning a solution which I found on stackoverflow, not necessarily the exact solution for this thread but since I came across this thread and a solution worked for me I posted. BTW I am using wsl and if you face daemon bus issue you can start the dbus using > `sudo service dbus start` > I really don't know the technicalities but this worked for me so just posting it here for what its worth. > cheers! ----- > **[2022年01月17日T11:07:40Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1014399582) - [@dsommers](https://github.com/dsommers)** > > ### To the next commenter > Have you read carefully the initial issue comment? Have you verified your configuration **does** contain `pkcs12`? If no, do that first. ----- > **[2023年11月13日T04:01:34Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1807441733) - [@waggyman](https://github.com/waggyman)** > > From @dsommers comment. > > @coolgoel18 This doesn't make sense. `--pkcs12` option support has never been properly supported in OpenVPN 3 Linux, due to lack of support of it in the [OpenVPN 3 Core library](https://github.com/openVPN/openvpn3). Using the `openvpn2` command line wrapper from the OpenVPN 3 Linux project is able to handle this, because it uses the Python OpenSSL implementation to split up the `.pkcs12` file into separate `.pem` files for certificates, keys and CA certificate. > > using `openvpn2` command line wrapper for OpenVPN3 solved my problem of `CA Not Defined` when using `.p12` file. > > Thanks 👍 ----- > **[2023年11月13日T08:59:56Z](https://github.com/OpenVPN/openvpn3-linux/issues/25#issuecomment-1807710600) - [@dsommers](https://github.com/dsommers)** > > I wrapped together a quick Python script now, which can import configuration profiles (a variant of `openvpn3 config-import --persistent`). I'll add that to the source repo in the nearer future as well; but here's a copy of it - only lightly tested. > ```python > #!/usr/bin/python3 > # > # OpenVPN 3 Linux client -- Next generation OpenVPN client > # > # SPDX-License-Identifier: AGPL-3.0-only > # > # Copyright (C) 2017 - 2023 OpenVPN Inc <sales@openvpn.net> > # Copyright (C) 2017 - 2023 David Sommerseth <davids@openvpn.net> > # > # > # Another Python implementation of importing a configuration profile. > # This approach uses the openvpn3 Python to get a real configuration > # profile to use for the import (via the openvpn3.ConfigParser) and > # imports it using the openvpn3.ConfigurationManager. > # > # Use this as: ./configimport2.py CONFIG_NAME <openvpn 2 options> > # Example: ./configimport2.py my-config --config /path/to/config.ovpn --verb 6 > # > > import dbus > import openvpn3 > import sys > > # Simple argument pre-checks > if sys.argv[1] in ['--help','-h']: > openvpn3.ConfigParser(sys.argv, 'Imports a configuration profile') > sys.exit(0) > > if len(sys.argv) < 3: > print('** ERROR ** Too few arguments') > print('Usage: %s CONFIG_NAME <openvpn options....>') > sys.exit(1) > > # Parse the configuration > config_name = sys.argv[1] > parser_args = [sys.argv[0],] + sys.argv[2:] > cfgparser = openvpn3.ConfigParser(parser_args, 'Imports a configuration profile') > cfgparser.SanityCheck() > config_profile = cfgparser.GenerateConfig() > > # Get a connection to the system bus > bus = dbus.SystemBus() > > # Get a connection to the OpenVPN 3 Configuration Manager > config_mgr = openvpn3.ConfigurationManager(bus) > > # Import the configuration as a multi-use, persistent configuration profile > config = config_mgr.Import(config_name, config_profile, False, True) > print('Configuration "%s" imported' % config_name) > print('Configuration path: ' + config.GetPath()) > ``` > > This will appear as `src/tests/python/configimport2.py` once committed and pushed.
Sign in to join this conversation.
No Branch/Tag specified
master
releaseprep/v27.1
dev/core-update-wip
dev/cb89-inactive-fix
releaseprep/v26
dev/gh-issue-14-asio-include-dir
v27.1
v27.1_rc1
v27
v26
v25
v24.1
v24
v23
v22_dev
v21
v20
v19_beta
v19_betaRC1
v18_beta
v18_betaRC3
v18_betaRC2
v18_betaRC
v17_betaUb2204
v17_beta
v16_beta
v15_beta
v14_beta
v13_beta
v12_beta
v11_beta
v10_beta
v9_beta
v8_beta
v7_beta
v6_beta
v5_beta
v4_beta
v3_beta
v2_beta
v1_beta
Labels
Clear labels
Access Server
Issue related to connecting/integration with OpenVPN Access Server
addon-aws
openvpn3-service-aws / net.openvpn.v3.aws, AWS-VPC integration add-on
addon-devposture
openvpn3-service-devposture / net.openvpn.v3.devposture, Device Posture Check (DPC) service
Awaiting external feedback
Feedback from an external party is needed to continue investigation
build
Issue is related to the build system (meson) or general compilation issues
cli-openvpn2
OpenVPN 2 compat wrapper utility
cli-openvpn3
openvpn3 command line
cli-openvpn3-admin
openvpn3-admin command line
cli-openvpn3-as
OpenVPN Access Server profile download utility
Cloud Connexa
Issue related to connecting to the Cloud Connexa service
common
Shared code across modules
Development done
A fix has been applied to git master
distro-support
OS distribution support
duplicate
This is a duplicate issue of another issue ticket.
Enhancement
Proposal for an enhancement
GitHub
Issue transfered from GitHub
Infrastructure
Issue related to the infrastructure for builds, package repositories, etc
Investigating
The issue is being investigated by a project developer
OpenVPN 3 Core
Issue needs to be resolved in the OpenVPN 3 Core Library
openvpn3-systemd
systemd integration (openvpn3-session@.service, helper tools)
python
The openvpn3 Python module
service-backendstart
openvpn3-service-backendstart / net.openvpn.v3.backends, VPN client service starter
service-client
openvpn3-service-client / net.openvpn.v3.backends.be$PID, Backend VPN client service
service-configmgr
openvpn3-service-configmgr / net.openvpn.v3.configuration, Configuration Profile Manager
service-log
openvpn3-service-log / net.openvpn.v3.log, Log collector service
service-netcfg
openvpn3-service-netcfg / net.openvpn.v3.netcfg, Network Configuration Manager
service-sessionmgr
openvpn3-service-sessionmgr / net.openvpn.v3.sessions, VPN sessions manager
Support
Issue is a support question, not a bug
tests programs
Issue is related to code in src/tests
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
OpenVPN/openvpn3-linux#76
Reference in a new issue
OpenVPN/openvpn3-linux
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?