Ubuntu
network-manager-openvpn package

OpenVPN lacks support for --tls-remote option

Bug #116256 reported by David Parker on 2007-05-22

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	NetworkManager-OpenVPN	Fix Released	Wishlist	gnome-bugs #455142
	network-manager-openvpn (Ubuntu)	Fix Released	Wishlist	Unassigned

Bug Description

Binary package hint: network-manager-openvpn

The network-manager-openvpn plugin doesn't support the tls-remote option in OpenVPN as a form of server certificate verification. For VPNs that rely on tls-remote for verification of certificates NetworkManager will refuse to connect.

From the openvpn man page:
       --tls-remote name
              Accept connections only from a host with X509 name or common
              name equal to name. The remote host must also pass all other
              tests of verification.

The attached patch adds backend support for this option and an additional field in the frontend GUI settings window.

Tags:

Revision history for this message

David Parker (dparker) wrote on 2007-05-22:

Adds support for --tls-remote Edit (9.8 KiB, text/plain)

Revision history for this message

Luca Falavigna (dktrkranz) wrote on 2007-07-09:

Patch submitted upstream.

Bug Watch Updater (bug-watch-updater) on 2007-07-10

Changed in network-manager-openvpn:
status:	Unknown → New

Philipp Kern (pkern) on 2007-09-24

Changed in network-manager-openvpn:
importance:	Undecided → Wishlist
status:	New → Confirmed

Bug Watch Updater (bug-watch-updater) on 2008-08-08

Changed in network-manager-openvpn:
status:	New → Confirmed

Bug Watch Updater (bug-watch-updater) on 2008-08-28

Changed in network-manager-openvpn:
status:	Confirmed → Incomplete

Bug Watch Updater (bug-watch-updater) on 2009-02-24

Changed in network-manager-openvpn:
status:	Incomplete → Confirmed

Revision history for this message

Michael Helmling (supermihi) wrote on 2009-07-11:

May I ask why there is no progress of this bug? As far as I can see there is a patch available for two years now ... I really need this feature to connect to my university network!

Revision history for this message

JanBrinkmann (jbrinkmann) wrote on 2010-01-27:

The patch was imported upstream to 0.7.x on 2010-01-18 . Seems that this bug can be closed when the release hits the Ubuntu Repositories (maybe already in lucid?).

Revision history for this message

bojo42 (bojo42) wrote on 2010-03-14:

seems tls-remote got added: https://launchpad.net/ubuntu/+source/network-manager-openvpn/0.8-0ubuntu1