I'm seeing some weird issue with the new NM + openvpn; if I create a new VPN connection, and add certificate options (verify name exactly, plus TLS auth), these options are not saved, leading to the connection failing.
The following versions lead to an invalid connection:
ii network-manager 1.12.4-1ubuntu1 amd64 network management framework (daemon and userspace tools)
ii network-manager-openvpn 1.8.6-1 amd64 network management framework (OpenVPN plugin core)
Reverting to the following versions, things work again:
ii network-manager 1.12.2-0ubuntu4 amd64 network management framework (daemon and userspace tools)
ii network-manager-openvpn 1.8.4-1 amd64 network management framework (OpenVPN plugin core)
If I use an existing connection saved with a prior version of NM, the connection will be successful. If I go open the settings, hit Apply, all advanced TLS settings are wiped.
The connection then fails:
Oct 10 16:58:52 demeter nm-openvpn[6538]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 10 16:58:52 demeter nm-openvpn[6538]: TCP/UDP: Preserving recently used remote address: [AF_INET]91.189.91.19:443
Oct 10 16:58:52 demeter nm-openvpn[6538]: Attempting to establish TCP connection with [AF_INET]91.189.91.19:443 [nonblock]
Oct 10 16:58:53 demeter nm-openvpn[6538]: TCP connection established with [AF_INET]91.189.91.19:443
Oct 10 16:58:53 demeter nm-openvpn[6538]: TCP_CLIENT link local: (not bound)
Oct 10 16:58:53 demeter nm-openvpn[6538]: TCP_CLIENT link remote: [AF_INET]xx.xx.xx.xx:443
Oct 10 16:58:53 demeter nm-openvpn[6538]: Connection reset, restarting [0]
Oct 10 16:58:53 demeter nm-openvpn[6538]: SIGUSR1[soft,connection-reset] received, process restarting
Oct 10 16:58:58 demeter nm-openvpn[6538]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Oct 10 16:58:58 demeter nm-openvpn[6538]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 10 16:58:58 demeter nm-openvpn[6538]: TCP/UDP: Preserving recently used remote address: [AF_INET6]2001:67c:1562:0:1::1:443
Oct 10 16:58:58 demeter nm-openvpn[6538]: Attempting to establish TCP connection with [AF_INET6]2001:67c:1562:0:1::1:443 [nonblock]
Oct 10 16:58:59 demeter nm-openvpn[6538]: TCP: connect to [AF_INET6]xxxx:xxx:xx:xx::xx:443 failed: Network is unreachable
Oct 10 16:58:59 demeter nm-openvpn[6538]: SIGUSR1[connection failed(soft),init_instance] received, process restarting
Oct 10 16:59:04 demeter nm-openvpn[6538]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
I'm unsure whether this is NM or n-m-openvpn. Looks more like NM, since downgrading n-m-openvpn alone didn't seem to change anything.