Debian Bug report logs -
#848062
Warn users of removed tls-remote option
Reported by: dann frazier <dannf@debian.org>
Date: Tue, 13 Dec 2016 10:42:10 UTC
Severity: normal
Found in version openvpn/2.4~rc1-1
Fixed in version openvpn/2.4.0-1
Done: Alberto Gonzalez Iniesta <agi@inittab.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#848024; Package network-manager-openvpn.
(Tue, 13 Dec 2016 10:42:13 GMT) (full text, mbox, link).
Acknowledgement sent
to dann frazier <dannf@debian.org>:
New Bug report received and forwarded. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>.
(Tue, 13 Dec 2016 10:42:13 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: network-manager-openvpn
Version: 1.2.6-2
Severity: normal
After upgrading to openvpn 2.4~rc1-2, my VPN connection began to fail:
Dec 13 09:49:37 xps13 NetworkManager[738]: Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
(Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
I'm working around this by reverting to openvpn 2.3.11-2.
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-rc7-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages network-manager-openvpn depends on:
ii adduser 3.115
ii libc6 2.24-8
ii libglib2.0-0 2.50.2-2
ii libnm0 1.4.2-3
ii network-manager 1.4.2-3
ii openvpn 2.3.11-2
network-manager-openvpn recommends no packages.
network-manager-openvpn suggests no packages.
-- no debconf information
Information forwarded
to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#848024; Package network-manager-openvpn.
(Tue, 13 Dec 2016 15:33:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Michael Biebl <biebl@debian.org>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>.
(Tue, 13 Dec 2016 15:33:03 GMT) (full text, mbox, link).
Message #10 received at 848024@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Control: reassign -1 openvpn
Control: severity -1 serious
Control: affects -1 network-manager-openvpn
Am 13.12.2016 um 11:33 schrieb dann frazier:
> Package: network-manager-openvpn
> Version: 1.2.6-2
> Severity: normal
>
> After upgrading to openvpn 2.4~rc1-2, my VPN connection began to fail:
>
> Dec 13 09:49:37 xps13 NetworkManager[738]: Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
> (Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
>
> I'm working around this by reverting to openvpn 2.3.11-2.
Dear openvpn maintainers,
could you have a look at this bug report please.
It seems the new openvpn rc release breaks the NetworkManager openvpn
plugin.
I've bumped it to RC, so the package doesn't migrate to testing for now.
If there is something which needs to be fixed on the
network-manager-openvpn, please clone this bug report or reassign back.
Regards,
Michael
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
[signature.asc (application/pgp-signature, attachment)]
No longer marked as found in versions network-manager-openvpn/1.2.6-2.
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 15:33:04 GMT) (full text, mbox, link).
Severity set to 'serious' from 'normal'
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 15:33:05 GMT) (full text, mbox, link).
Added indication that 848024 affects network-manager-openvpn
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 15:33:05 GMT) (full text, mbox, link).
Marked as found in versions openvpn/2.4~rc1-1.
Request was from Michael Biebl <biebl@debian.org>
to control@bugs.debian.org.
(Tue, 13 Dec 2016 15:39:02 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org:
Bug#848024; Package openvpn.
(Tue, 13 Dec 2016 15:57:05 GMT) (full text, mbox, link).
Acknowledgement sent
to Alberto Gonzalez Iniesta <agi@inittab.org>:
Extra info received and forwarded to list.
(Tue, 13 Dec 2016 15:57:05 GMT) (full text, mbox, link).
Message #25 received at 848024@bugs.debian.org (full text, mbox, reply):
Control: reassign -1 network-manager-openvpn
On Tue, Dec 13, 2016 at 04:31:35PM +0100, Michael Biebl wrote:
> Control: reassign -1 openvpn
> Control: severity -1 serious
> Control: affects -1 network-manager-openvpn
>
> Am 13.12.2016 um 11:33 schrieb dann frazier:
> > Package: network-manager-openvpn
> > Version: 1.2.6-2
> > Severity: normal
> >
> > After upgrading to openvpn 2.4~rc1-2, my VPN connection began to fail:
> >
> > Dec 13 09:49:37 xps13 NetworkManager[738]: Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
> > (Options error: Unrecognized option or missing or extra parameter(s) in [CMD-LINE]:1: tls-remote (2.4_rc1)
> >
> > I'm working around this by reverting to openvpn 2.3.11-2.
>
>
> Dear openvpn maintainers,
>
> could you have a look at this bug report please.
> It seems the new openvpn rc release breaks the NetworkManager openvpn
> plugin.
> I've bumped it to RC, so the package doesn't migrate to testing for now.
>
> If there is something which needs to be fixed on the
> network-manager-openvpn, please clone this bug report or reassign back.
>
Hi there,
The --tls-remote was removed in OpenVPN 2.4, and was already marked as
DEPRECATED in OpenVPN 2.3. From OpenVPN 2.3's manpage:
Please also note: This option is now deprecated. It will be removed
either in OpenVPN v2.4 or v2.5. So please make sure you support the new
X.509 name formatting described with the --compat-names option as
soon as possible by updating your configurations to use
--verify-x509-name instead.
IMHO this should have been fixed in network-manager-openvpn before 2.4
arrived.
Regards,
Alberto
--
Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
mailto/sip: agi@inittab.org | en GNU/Linux y software libre
Encrypted mail preferred | http://inittab.com
Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55
No longer marked as found in versions openvpn/2.4~rc1-1.
Request was from Alberto Gonzalez Iniesta <agi@inittab.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 15:57:05 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>:
Bug#848024; Package network-manager-openvpn.
(Tue, 13 Dec 2016 17:06:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Michael Biebl <biebl@debian.org>:
Extra info received and forwarded to list. Copy sent to Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>.
(Tue, 13 Dec 2016 17:06:03 GMT) (full text, mbox, link).
Message #34 received at 848024@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Control: clone -1 -2
Control: reassign -2 openvpn 2.4~rc1-1
Control: retitle -2 needs versioned breaks against fixed network-manager-openvpn
Am 13.12.2016 um 16:53 schrieb Alberto Gonzalez Iniesta:
> Hi there,
>
> The --tls-remote was removed in OpenVPN 2.4, and was already marked as
> DEPRECATED in OpenVPN 2.3. From OpenVPN 2.3's manpage:
>
> Please also note: This option is now deprecated. It will be removed
> either in OpenVPN v2.4 or v2.5. So please make sure you support the new
> X.509 name formatting described with the --compat-names option as
> soon as possible by updating your configurations to use
> --verify-x509-name instead.
>
> IMHO this should have been fixed in network-manager-openvpn before 2.4
> arrived.
Ok, thanks for the info.
I've cloned this bug report for openvpn. It needs a versioned Breaks
against network-manager-openvpn once a fixed version has been uploaded, to
avoid breakage on partial uploads.
I'll ping you once such a version is available.
Regards,
Michael
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
[signature.asc (application/pgp-signature, attachment)]
Bug 848024 cloned as bug 848062
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 17:06:03 GMT) (full text, mbox, link).
Marked as found in versions openvpn/2.4~rc1-1.
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 17:06:04 GMT) (full text, mbox, link).
Changed Bug title to 'needs versioned breaks against fixed network-manager-openvpn' from 'Fails to connect after upgrade to openvpn 2.4'.
Request was from Michael Biebl <biebl@debian.org>
to 848024-submit@bugs.debian.org.
(Tue, 13 Dec 2016 17:06:05 GMT) (full text, mbox, link).
Added blocking bug(s) of 848062: 848024
Request was from Michael Biebl <biebl@debian.org>
to control@bugs.debian.org.
(Tue, 13 Dec 2016 17:15:02 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org:
Bug#848062; Package openvpn.
(Thu, 15 Dec 2016 11:36:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Alberto Gonzalez Iniesta <agi@inittab.org>:
Extra info received and forwarded to list.
(Thu, 15 Dec 2016 11:36:04 GMT) (full text, mbox, link).
Message #49 received at 848062@bugs.debian.org (full text, mbox, reply):
Control: retitle -1 Warn users of removed tls-remote option
Control: severity -1 normal
Control: tags -1 + pending
As Michael explains in #848024 this is not a bug and this does not break
NetworkManager(-openvpn), but a deprecated (long time ago) option that
is now gone.
I'll add a NEWS.Debian entry to warn users.
Regards,
Alberto
--
Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
mailto/sip: agi@inittab.org | en GNU/Linux y software libre
Encrypted mail preferred | http://inittab.com
Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55
Changed Bug title to 'Warn users of removed tls-remote option' from 'needs versioned breaks against fixed network-manager-openvpn'.
Request was from Alberto Gonzalez Iniesta <agi@inittab.org>
to 848062-submit@bugs.debian.org.
(Thu, 15 Dec 2016 11:36:04 GMT) (full text, mbox, link).
Severity set to 'normal' from 'serious'
Request was from Alberto Gonzalez Iniesta <agi@inittab.org>
to 848062-submit@bugs.debian.org.
(Thu, 15 Dec 2016 11:36:05 GMT) (full text, mbox, link).
Added tag(s) pending.
Request was from Alberto Gonzalez Iniesta <agi@inittab.org>
to 848062-submit@bugs.debian.org.
(Thu, 15 Dec 2016 11:36:06 GMT) (full text, mbox, link).
Reply sent
to Alberto Gonzalez Iniesta <agi@inittab.org>:
You have taken responsibility.
(Tue, 27 Dec 2016 23:39:05 GMT) (full text, mbox, link).
Notification sent
to dann frazier <dannf@debian.org>:
Bug acknowledged by developer.
(Tue, 27 Dec 2016 23:39:05 GMT) (full text, mbox, link).
Message #60 received at 848062-close@bugs.debian.org (full text, mbox, reply):
Source: openvpn
Source-Version: 2.4.0-1
We believe that the bug you reported is fixed in the latest version of
openvpn, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 848062@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alberto Gonzalez Iniesta <agi@inittab.org> (supplier of updated openvpn package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 27 Dec 2016 18:29:43 +0100
Source: openvpn
Binary: openvpn
Architecture: source amd64
Version: 2.4.0-1
Distribution: unstable
Urgency: medium
Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org>
Changed-By: Alberto Gonzalez Iniesta <agi@inittab.org>
Description:
openvpn - virtual private network daemon
Closes: 848062
Changes:
openvpn (2.4.0-1) unstable; urgency=medium
.
* New upstream release.
* Refresh debian/patches to new upstream coding style.
* debian/NEWS.Debian. Add note on removed tls-remote option
(Closes: #848062)
Checksums-Sha1:
0bde4009e6da63f5ae7336af12ed963565bc966b 2080 openvpn_2.4.0-1.dsc
7772eb3ddea45c3f894e6a534f3368369d3d0bc0 1409019 openvpn_2.4.0.orig.tar.gz
90ef11b0bd6978666ffdaab310475ee57e3994b6 49820 openvpn_2.4.0-1.debian.tar.xz
841fd4fd85e4850110e7407b39c05ea8edd05411 1436956 openvpn-dbgsym_2.4.0-1_amd64.deb
176231662a55855fdb0237ddd869406acd880a07 5428 openvpn_2.4.0-1_amd64.buildinfo
c01a88722e143b794d94aaaef58c0d69c8df8f08 513436 openvpn_2.4.0-1_amd64.deb
Checksums-Sha256:
724cae8db53d85bdc7abaecc3b025d41b01fb8ef503f5dd61af7761ee8d5319c 2080 openvpn_2.4.0-1.dsc
f21db525b3c03a9bbd0a7ab6d0e4fbaf8902f238bf53b8bc4e04f834e4e7caa4 1409019 openvpn_2.4.0.orig.tar.gz
6e0b3ebceaeca3ddc550f816951cfc56fa733d405544d16a5f13bf20b3aa4f91 49820 openvpn_2.4.0-1.debian.tar.xz
b45b524251f0b77659ced29457befaf9e6fffae41044a4bcf75fa669ba811c58 1436956 openvpn-dbgsym_2.4.0-1_amd64.deb
7de05f294a53c4676c7acf6d1a6571c0f2b52ecd268c90a44a40c251180e3dab 5428 openvpn_2.4.0-1_amd64.buildinfo
96b1cdce34945030f27562247c50db04e528e422d2bbc539ea9d5d6f59136565 513436 openvpn_2.4.0-1_amd64.deb
Files:
04cffcdf4cac6fdbbff615addd94536e 2080 net optional openvpn_2.4.0-1.dsc
e4b3932000a17d782b72e094752619ec 1409019 net optional openvpn_2.4.0.orig.tar.gz
ae975584dafe0e4f3ca2ff1b0dd6569c 49820 net optional openvpn_2.4.0-1.debian.tar.xz
2c0ea0a04956ca2ceccccb9f826a459f 1436956 debug extra openvpn-dbgsym_2.4.0-1_amd64.deb
3997cf54db4c7e55aa7bbf4903df915a 5428 net optional openvpn_2.4.0-1_amd64.buildinfo
18f7b0ed2386beee13741a9b199a23b4 513436 net optional openvpn_2.4.0-1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Cz9f
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 07 Feb 2017 07:34:08 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed Jan 10 18:25:11 2018;
Machine Name:
beach
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.