Bug 229048

Summary: OpenVPN connects but kvpnc still showing yellow light/connecting status
Product: kvpnc Reporter: Yevgeny Kosarzhevsky <phaoost>
Component: generalAssignee: Christoph Thielecke <crissi99>
Status: RESOLVED UNMAINTAINED    
Severity: normal CC: Development, dilfridge, tictacbum
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: Debian testing   
OS: Linux   
Latest Commit: Version Fixed In:
Attachments: Correct version comparison thinko

Description Yevgeny Kosarzhevsky 2010-03-01 18:17:47 UTC
Version:           0.9.3 (using KDE 4.3.4)
OS:                Linux
Installed from:    Debian testing/unstable Packages

I am able to connect with openvpn but kvpnc does not determine it is connected.
Comment 1 Yevgeny Kosarzhevsky 2010-03-01 18:21:11 UTC
This was reported earlier at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546826
Comment 2 Christoph Thielecke 2010-03-01 19:19:30 UTC
This should be fixed in current svn. Can you try it?
Comment 3 Yevgeny Kosarzhevsky 2010-03-03 23:24:15 UTC
Hi,

I have tried current 0.9.5 and then current kde4 svn trunk revision 1098555

No luck, still showing yellow light and 'Connecting' status. The VPN itself connected fine and was operational.
Comment 4 Yevgeny Kosarzhevsky 2010-03-03 23:25:24 UTC
changing to unconfirmed
Comment 5 Christoph Thielecke 2010-03-06 13:06:20 UTC
Can you provide more information? The log from kvpn debug console (kvpnc debug level: 6) is really helpul. Which openvpn version you are using?
Comment 6 Jivan Amara 2012-02-04 03:49:45 UTC
KDE: 4.7.4
kvpnc: 0.9.6
openvpn: 2.2.0
On Ubuntu 11.10
---
Hi, I'm experiencing the same issue.  The VPN connects and is operational, but shows a yellow square and 'Connecting...' message.  If you need details about the server or client conf just let me know, but both are very close to the template configuration files updated for my specific keys/certs/ip addresses.

Here's the debug console output with debug level = 6:

debug: openvpn: /usr/sbin/openvpn
debug: Support for TUN/TAP found (compiled into kernel or kernel module already loaded).
debug: Default interface: "tun0".
debug: IP address of default interface: "10.8.0.6".
info: Trying to connect to server "<ip hidden>" with ... 
debug: Setting DNS_UPDATE "Yes".
debug: Starting Openvpn management handler...
error: OpenvpnManagementHandler: Connection refused
debug: [openvpn] Sat Feb 4 11:42:55 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
debug: [openvpn] 
error: OpenvpnManagementHandler: Got no greeting within 3 seconds from management interface, retrying.
debug: [openvpn] Sat Feb 4 11:43:05 2012 WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
error: OpenvpnManagementHandler: The remote host closed the connection
debug: [openvpn] Sat Feb 4 11:43:05 2012 WARNING: Failed running command (--up/--down): external program fork failed
debug: [openvpn]
Comment 7 Andreas K. Huettel 2012-06-25 20:37:17 UTC
Created attachment 72138 [details]
Correct version comparison thinko

There's a thinko in the code that compares openvpn revisions. Basically, the script-security parameter is applied in openvpn-2.1 (correctly), but not anymore in openvpn-2.2 (incorrect). Fixed by attached patch. Greetings from Gentoo Linux :)
Comment 8 LluĂ­s 2013-08-19 13:25:30 UTC
I tested the patch and it works, thanks!
Comment 9 Andrew Crouthamel 2018-09-04 14:54:53 UTC
Hello! Sorry to be the bearer of bad news, but this project has been unmaintained for many years so I am closing this bug.