Bug 229048

Summary:	OpenVPN connects but kvpnc still showing yellow light/connecting status
Product:	[Unmaintained] kvpnc	Reporter:	Yevgeny Kosarzhevsky <phaoost>
Component:	general	Assignee:	Christoph Thielecke <crissi99>
Status:	RESOLVED UNMAINTAINED
Severity:	normal	CC:	Development, dilfridge, tictacbum
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Debian testing
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	Correct version comparison thinko

Description Yevgeny Kosarzhevsky 2010-03-01 18:17:47 UTC

Version:           0.9.3 (using KDE 4.3.4)
OS:                Linux
Installed from:    Debian testing/unstable Packages

I am able to connect with openvpn but kvpnc does not determine it is connected.

Comment 1 Yevgeny Kosarzhevsky 2010-03-01 18:21:11 UTC

This was reported earlier at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546826

Comment 2 Christoph Thielecke 2010-03-01 19:19:30 UTC

This should be fixed in current svn. Can you try it?

Comment 3 Yevgeny Kosarzhevsky 2010-03-03 23:24:15 UTC

Hi,

I have tried current 0.9.5 and then current kde4 svn trunk revision 1098555

No luck, still showing yellow light and 'Connecting' status. The VPN itself connected fine and was operational.

Comment 4 Yevgeny Kosarzhevsky 2010-03-03 23:25:24 UTC

changing to unconfirmed

Comment 5 Christoph Thielecke 2010-03-06 13:06:20 UTC

Can you provide more information? The log from kvpn debug console (kvpnc debug level: 6) is really helpul. Which openvpn version you are using?

Comment 6 Jivan Amara 2012-02-04 03:49:45 UTC

KDE: 4.7.4
kvpnc: 0.9.6
openvpn: 2.2.0
On Ubuntu 11.10
---
Hi, I'm experiencing the same issue. The VPN connects and is operational, but shows a yellow square and 'Connecting...' message. If you need details about the server or client conf just let me know, but both are very close to the template configuration files updated for my specific keys/certs/ip addresses.

Here's the debug console output with debug level = 6:

debug: openvpn: /usr/sbin/openvpn
debug: Support for TUN/TAP found (compiled into kernel or kernel module already loaded).
debug: Default interface: "tun0".
debug: IP address of default interface: "10.8.0.6".
info: Trying to connect to server "<ip hidden>" with ...
debug: Setting DNS_UPDATE "Yes".
debug: Starting Openvpn management handler...
error: OpenvpnManagementHandler: Connection refused
debug: [openvpn] Sat Feb 4 11:42:55 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
debug: [openvpn]
error: OpenvpnManagementHandler: Got no greeting within 3 seconds from management interface, retrying.
debug: [openvpn] Sat Feb 4 11:43:05 2012 WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
error: OpenvpnManagementHandler: The remote host closed the connection
debug: [openvpn] Sat Feb 4 11:43:05 2012 WARNING: Failed running command (--up/--down): external program fork failed
debug: [openvpn]

Comment 7 Andreas K. Huettel 2012-06-25 20:37:17 UTC

Created attachment 72138 [details]
Correct version comparison thinko

There's a thinko in the code that compares openvpn revisions. Basically, the script-security parameter is applied in openvpn-2.1 (correctly), but not anymore in openvpn-2.2 (incorrect). Fixed by attached patch. Greetings from Gentoo Linux :)

Comment 8 Lluís 2013-08-19 13:25:30 UTC

I tested the patch and it works, thanks!

Comment 9 Andrew Crouthamel 2018-09-04 14:54:53 UTC

Hello! Sorry to be the bearer of bad news, but this project has been unmaintained for many years so I am closing this bug.