Re: complex openvpn - can nm just launch?

[Dan Williams <dcbw redhat com>]

On Tue, 2010-04-06 at 11:28 -0600, Scott Serr wrote:
> On 04/06/2010 10:25 AM, Dan Williams wrote:
> > On Tue, 2010-04-06 at 10:05 -0600, Scott Serr wrote:
> >    
> >> I have an openvpn config file that works fine with openvpn.  (ubuntu
> >> lucid beta)  As far as I can tell there is no way to create a like
> >> config in the nm openvpn editor.  I can make one somewhat similar and
> >> export, but it doesn't look enough like mine to work.
> >>      
> > Which options?
> >
> > Dan
> >    
> 
> I suspect there will always be a new option to chase.

Probably, but at some point we reach the set of options that 95% of
people use.  There are seriously so many options with openvpn that it's
not funny, and the program is completely incapable of auto-negotiating
them, which is also not funny.  It's downright sad.

> Here is mine:
> 
> dev tun
> remote 127.0.0.1 41927 tcp-client
> proto tcp-client
> ifconfig 192.168.56.2 192.168.56.1
> route 0.0.0.0 128.0.0.0
> route 128.0.0.0 128.0.0.0
> socket-flags TCP_NODELAY
> ping 10
> dhcp-option DNS 192.168.56.1
> 
> There is no encryption, data is sent in cleartext.  This is appropriate 
> for use with Azilink on Android phones.

The only thing I can see that's not yet supported is the "no encryption"
part, which (not to be pedantic) isn't really a VPN.  But I suppose
that's something we can add.

Dan