FS#46422 - [openvpn] 2.3.8-1 client stop ask for password,

Attached to Project: Arch Linux
Opened by Tomasz Cebula (tomaszc) - Thursday, 24 September 2015, 16:20 GMT
Last edited by Sébastien Luttringer (seblu) - Monday, 02 November 2015, 19:34 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Thomas Bächler (brain0)
Sébastien Luttringer (seblu)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 10
Private No

Details

Description:
After updating to version 2.3.8-1 client openvpn stopped to ask for the password to the key. There is an error:

neither stdin nor stderr are a tty device, can't ask for Private Key password. If you used --daemon, you need to use --askpass to make passphrase-protected keys work, and y...e --auth-nocache.


Deleting '--daemon' from file /lib/systemd/system/openvpn@.service does not help.

More information is available at:
https://bbs.archlinux.org/viewtopic.php?id=202793
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Monday, 02 November 2015, 19:34 GMT
Reason for closing:  Fixed
Comment by Jeroen Mathon (JeroenMathon) - Monday, 28 September 2015, 20:44 GMT
I can confirm that i got the same if not similar bug.

Mon Sep 28 22:44:08 2015 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=enp3s0 HWADDR=d8:50:e6:1e:58:26
Mon Sep 28 22:44:08 2015 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
Mon Sep 28 22:44:08 2015 Exiting due to fatal error
Comment by Tomasz Cebula (tomaszc) - Monday, 28 September 2015, 23:25 GMT
@Jeroen Mathon
Your problem is not related to this bug. Probably you upgraded kernel without rebooting the system.
Comment by Thomas Bächler (brain0) - Wednesday, 30 September 2015, 20:59 GMT
The bug is known to me, that is why I never packages openvpn 2.3.8. I am assigning this to the guy who updated the package regardless, and I will let him sort out this mess.
Comment by slowbro (slowbro) - Wednesday, 07 October 2015, 17:58 GMT
Is there a workaround other than downgrading or manually starting openvpn without systemd?
Comment by Simon Vikström (simonvik) - Thursday, 08 October 2015, 07:10 GMT
Just building it your self and remove the code mentioned in https://bbs.archlinux.org/viewtopic.php?id=202793 works. Make sure to run --askpass if you do so.
Comment by Sébastien Luttringer (seblu) - Thursday, 22 October 2015, 14:44 GMT
Thomas, last time you packaged openvpn was 2.3.5 back to october 2014, I thought you neglected it; not you're waiting a bug fix introduced in version 2.3.8. Anyway the package was gone through testing, too bad you didn't object before it reach core if you knew about this issue.

So, the problem is clearly with the tty check pointed on the BBS and there is a patch proposed by a redhat guy on a openvpn trac: https://community.openvpn.net/openvpn/ticket/618

A new package is landing in testing which fix this issue. The directive 'askpass' (config or command line) is not necessary.

Loading...