network-manager-openvpn: --cipher option deprecated in OpenVPN 2.6, no option to set suggested --data-ciphers flag instead

[Franck]

Latest network-manager-openvpn still uses the deprecated --cipher option, and offers no way to set the new --data-ciphers option.

nm-openvpn[257279]: OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
nm-openvpn[257279]: ERROR: Failed to apply push options
nm-openvpn[257279]: Failed to open tun/tap interface

Using the command line and passing --data-ciphers option works.

ProblemType: Bug
DistroRelease: Ubuntu 22.10
Package: network-manager-openvpn 1.10.0-1ubuntu2
ProcVersionSignature: Ubuntu 5.19.0-21.21-generic 5.19.7
Uname: Linux 5.19.0-21-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.23.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: KDE
Date: Thu Oct 20 09:50:10 2022
InstallationDate: Installed on 2022-02-05 (256 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Alpha amd64 (20220119)
SourcePackage: network-manager-openvpn
UpgradeStatus: No upgrade log present (probably fresh install)

[Franck (alci)]

This bug is found for Debian here :

https://groups.google.com/g/linux.debian.bugs.dist/c/IlCHDJxBets

and upstream here :

https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/97

[Sebastien Bacher (seb128)]

Thank you for your bug report. It should have been fixed in https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/1.10.0-1ubuntu1 which is a cherrypick of https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/commit/963b71a8

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sebastien Bacher (seb128)]

Detail from one of the other reports

'It has been fixed in 1.10.0-1ubuntu2. However, GUI settings does not process .ovpn correctly, so data-ciphers=AES-256-CBC has to be added to your connection in /etc/NetworkManager/system-connections.'

[Sebastien Bacher (seb128)]

which is reported upstream as https://gitlab.gnome.org/GNOME/NetworkManager-openvpn/-/issues/110

[Drew N (n1xim-email)]

Will this be fixed on Ubuntu 22.04 LTS as well? The ticket marked as a duplicate of this one for 22.04 doesn't actually include the updated software as a fix, so it is broken (again).