Hi,

the knetworkmanager dosen't work with OpenVPN with using X.509 certificates. I test it in Kubuntu 8.04, 8.10 beta and Sidux.

On Kubuntu 8.10 beta:
When I attempt to activate the VPN session, nothing prompts me for an X.509 passphrase and the nm-openvpn-server crash with segfault:

dmesg output:

Code: Select all

[   94.777506] tun: Universal TUN/TAP device driver, 1.6
[   94.777531] tun: (C) 1999-2004 Max Krasnyansky
[   94.796751] nm-openvpn-serv[6581]: segfault at 0 ip 08049dfd sp bf999e90 error 4 in nm-openvpn-service[8048000+5000]

/var/log/syslog:

Code: Select all

Oct 14 18:27:46 test NetworkManager:   Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Oct 14 18:27:46 test NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 6581
Oct 14 18:27:46 test kernel: [   94.777506] tun: Universal TUN/TAP device driver, 1.6
Oct 14 18:27:46 test kernel: [   94.777531] tun: (C) 1999-2004 Max Krasnyansky
Oct 14 18:27:46 test NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Oct 14 18:27:46 test NetworkManager:   VPN plugin state changed: 1
Oct 14 18:27:46 test kernel: [   94.796751] nm-openvpn-serv[6581]: segfault at 0 ip 08049dfd sp bf999e90 error 4 in nm-openvpn-service[8048000+5000]
Oct 14 18:27:47 test NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' disappeared, cancelling connections
Oct 14 18:27:47 test NetworkManager:   connection_state_changed(): The name org.freedesktop.NetworkManager.openvpn was not provided by any .service files
Oct 14 18:27:47 test NetworkManager:   vpn_service_watch_cb(): VPN service 'org.freedesktop.NetworkManager.openvpn' died with signal 11

On Kubuntu 8.04 and sidux:
When I attempt to activate the VPN session, nothing prompts me for an X.509 passphrase. The VPN connection dosen't crash but connection failed after timeout.

/var/log/syslog:

Code: Select all

Oct 14 19:31:05 siduxbox NetworkManager:   Will activate VPN connection 'Peter', service 'org.freedesktop.NetworkManager.openvpn', user_name 'kobelix', vpn_data 'connection-type / x509 / remote / xxx.xxx.net / port / 443 / ca / /home/kobelix/Desktop/key_fuer_kobelix/ca.crt / cert / /home/kobelix/Desktop/key_fuer_kobelix/peter.crt / key / /home/kobelix/Desktop/key_fuer_kobelix/peter.key / comp-lzo / yes / shared-key /  / username /  / local-ip /  / remote-ip /  / dev / tap / proto / tcp / ta-dir / none', route '192.168.6.0/24'.
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 1 of 4 (Connection Prepare) scheduled...
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 1 of 4 (Connection Prepare) ran VPN service daemon org.freedesktop.NetworkManager.openvpn (PID 7372)
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 1 of 4 (Connection Prepare) complete.
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 2 of 4 (Connection Prepare Wait) scheduled...
Oct 14 19:31:05 siduxbox kernel: [  453.402111] tun: Universal TUN/TAP device driver, 1.6
Oct 14 19:31:05 siduxbox kernel: [  453.402131] tun: (C) 1999-2004 Max Krasnyansky
Oct 14 19:31:05 siduxbox NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 1 -> 6.
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 2 of 4 (Connection Prepare Wait) waiting...
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 2 of 4 (Connection Prepare Wait) complete.
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 3 of 4 (Connect) scheduled...
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 3 of 4 (Connect) sending connect request.
Oct 14 19:31:05 siduxbox NetworkManager:   VPN Activation (Peter) Stage 3 of 4 (Connect) request sent, waiting for reply...
Oct 14 19:31:05 siduxbox NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 6 -> 3.
Oct 14 19:31:05 siduxbox nm-openvpn[7378]: OpenVPN 2.1_rc7 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Jun 11 2008
Oct 14 19:31:05 siduxbox nm-openvpn[7378]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Oct 14 19:31:06 siduxbox NetworkManager:   VPN Activation (Peter) Stage 3 of 4 (Connect) reply received.
Oct 14 19:31:06 siduxbox NetworkManager:   VPN Activation (Peter) Stage 4 of 4 (IP Config Get) timeout scheduled...
Oct 14 19:31:06 siduxbox NetworkManager:   VPN Activation (Peter) Stage 3 of 4 (Connect) complete, waiting for IP configuration...
Oct 14 19:31:21 siduxbox nm-openvpn[7378]: ERROR: could not read Private Key username/password/ok from management interface
Oct 14 19:31:21 siduxbox nm-openvpn[7378]: Exiting
Oct 14 19:31:21 siduxbox NetworkManager:   nm_vpn_service_process_signal(): VPN failed for service 'org.freedesktop.NetworkManager.openvpn', signal 'ConnectFailed', with message 'The VPN login failed because the VPN program could not connect to the VPN server.'.
Oct 14 19:31:21 siduxbox NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 3 -> 5.
Oct 14 19:31:21 siduxbox NetworkManager:   VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 5 -> 6.
Oct 14 19:31:21 siduxbox NetworkManager:   nm_vpn_service_stop_connection(): (VPN Service org.freedesktop.NetworkManager.openvpn): could not stop connection 'Peter' because service was 6.

On all tests network-manager-gnome (nm-applet) and openvpn in terminal works fine but dosen't work with knetworkmanager on KDE 3 and 4. Why? Knetworkmanager is a great application but buggy. That's a pity.

I see the problem is not only on Debian based Distributions. On Fedora, KDE work with network-manager-gnome too. No knetworkmanager is installed.

Please fix knetworkmanager. Please.

I hope my english is OK.

Best regards

kobelix

There is currently a complete rewrite of KNetworkManager ( now "Network Management" ) being made for KDE 4. This will hopefully fix many of the issues that are related to KNetworkManager.

Not yet, at least in Kubuntu karmic - openvpn mn plugin does not ask during configuration or connection for a passphrase when using certificates (unlike the Ubuntu nm which does and which connects)

This is still a problem.

Did you test with Network Management or something else?