Arch Linux

apollo22

Member

Registered: 2018-04-13

Posts: 34

NetworkManager - OpenVPN: cert-pass and vpn.secrets

Hi,

This is for future reference, in case someone has the same problem:

I began by importing my .ovpn file using

nmcli connection import type openvpn file <file.ovpn>

From this, I was having two problems using OpenVPN through nmcli:

First, using:

nmcli con up <connection> --ask

It prompts me with

Certificate password: (vpn.secrets.cert-pass): 

And this even though I don't have any password for this file (I can enter any password and connection will succeed).

I also tried setting cert-pass-flags=4 or cert-pass-flags=0, but it kept asking for it.

I ended up editing the nmconnection file in /etc/NetworkManager/system-connections:

[vpn]
cert-pass-flags=0
password-flags=0

[vpn-secrets]
password=*****
cert-pass=any

It tried setting vpn.secrets using nmcli con edit, but the modification were not recorded (maybe because of a keyring ?). Modifying any setting through nmcli con edit also erase the [vpn-secrets] part.

Hope this can help. If you can explain this behavior, or show me how to do this using only nmcli con edit, please comment.

PS: When you forget vpn.user-name, I got "Failed to request VPN secrets #4: No agents were available for this request."

Last edited by apollo22 (2019-04-06 23:38:55)