[16.04] Unable to import OpenVPN configuration into Network Manager

[Thomas Ward]

In 16.04, it is currently not possible to import OpenVPN configurations. Specifically, imports fail with the error of:

The file 'filename.ovpn' could not be read or does not contain recognized VPN connection information.

Error: Key file contains line 'client' which is not a key-value pair, group, or comment.

------

An example configuration that fails to import is as follows (with some critical components excluded, like a proper remote address, or a proper x509 name); this is a config that otherwise works with a Sophos XG Firewall-based SSL VPN system

client
dev tun
persist-tun
persist-key
proto tcp
verify-x509-name "<Proper CN/DN chain>"
route remote_host 255.255.255.255 net_gateway
resolv-retry infinite
remote 1.2.3.4 8443 tcp
ca ca.crt
cert client.crt
key client.key
auth-user-pass
cipher AES-256-CBC
auth SHA512
comp-lzo no
route-delay 4
verb 3
reneg-sec 0

------

This same exact configuration works with a direct call of `openvpn ./filename.ovpn`.

Why Network Manager is unable to parse or import the OpenVPN configuration is beyond my ability to comprehend.

Note that the same configuration made by hand in the new VPN window works fine, but the import function fails. (Which is a pretty severe bug)

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: network-manager-openvpn 1.1.93-1ubuntu1.1
ProcVersionSignature: Ubuntu 4.13.0-39.44~16.04.1-generic 4.13.16
Uname: Linux 4.13.0-39-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.16
Architecture: amd64
CurrentDesktop: Unity
Date: Tue May 8 14:59:54 2018
InstallationDate: Installed on 2016-12-20 (503 days ago)
InstallationMedia: Ubuntu 16.04.1 LTS "Xenial Xerus" - Release amd64 (20160719)
SourcePackage: network-manager-openvpn
UpgradeStatus: No upgrade log present (probably fresh install)

[Sebastien Bacher (seb128)]

Is that still an issue in 18.04?

[Thomas Ward (teward)]

No, this does not affect 18.04, and likely does not affect later versions either. (Likely due to updated OVPN libraries and such?)

[Thomas Ward (teward)]

This does however still affect 16.04.

[Sebastien Bacher (seb128)]

Thanks, closing for the current serie then.

[Thomas Ward (teward)]

seb128: Actually looks more like it affects 18.04 again. Digging deeper now.

[Sebastien Bacher (seb128)]

Deleting the bionic line since it lacks enough details to be acted on at this point and has no owner, if you want to suggest it to be reviewed for that target best to tag it rls-bb-incoming so the team owning the package can review and decide if that's an item they want to own (which is blocking not the case until it has the required details to be worked on)

[Sebastien Bacher (seb128)]

Said differently, a first step would be to add a testcase that others could follow to trigger the bug

[Thomas Ward (teward)]

I"m attaching an example OVPN file with more private details stripped out of it.

This is a typical OpenVPN export. Network Manager is unable to parse it for the error specified previously.

This is failing to import in both 16.04 and 18.04 and needs addressed.

[Thomas Ward (teward)]

DISREGARD for 18.04, it looks like I have conflicting imports with all the VPN plugins installed for Network Manager that I do.

Looks like the pure OpenVPN plugin doesn't have an Import function. Which sucks, but is not to be unexpected.