Public bug reported:

If I add a VPN with "cipher AES-256-CBC" in the config it is unable to
connect.

Logs show:
Oct 13 19:08:54 prism nm-openvpn[43079]: OPTIONS ERROR: failed to negotiate 
cipher with server.  Add the server's cipher ('AES-256-CBC') to --data-ciphers 
(currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect 
to this server.
Oct 13 19:08:54 prism nm-openvpn[43079]: ERROR: Failed to apply push options


There is an upstream issue here: 
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/145

nmcli connection modify CONNECTION_NAME +vpn.data "data-ciphers =
AES-256-CBC" resolves my issue.

** Affects: network-manager-openvpn (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: oracular

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager-openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/2084400

Title:
  Cannot add a VPN with "cipher AES-256-CBC"

Status in network-manager-openvpn package in Ubuntu:
  New

Bug description:
  If I add a VPN with "cipher AES-256-CBC" in the config it is unable to
  connect.

  Logs show:
  Oct 13 19:08:54 prism nm-openvpn[43079]: OPTIONS ERROR: failed to negotiate 
cipher with server.  Add the server's cipher ('AES-256-CBC') to --data-ciphers 
(currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect 
to this server.
  Oct 13 19:08:54 prism nm-openvpn[43079]: ERROR: Failed to apply push options

  
  There is an upstream issue here: 
https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/145

  nmcli connection modify CONNECTION_NAME +vpn.data "data-ciphers =
  AES-256-CBC" resolves my issue.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/2084400/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to