Re: IPv6 in network-manager-openvpn

On Tue, 2013-12-17 at 11:57 +0100, Tore Anderson wrote:
* Nicolas Iooss

A few weeks ago I ran into a bug in NetworkManager: even though OpenVPN
now supports IPv6 in tunnels, the OpenVPN plugin of NetworkManager
doesn't support it. I found bug 682620
( and I've implemented
some of the missing features with the help
of network-manager-openconnect commits (basically the IPv6 payload part,
not the IPv6 endpoint one). My patches are attached to this email. Can
someone review them and tell me what may be wrong with them? As I'm new
with NetworkManager, I think there must be some mistakes in my code.

Hello Nicolas,

I (and pretty much all of my colleagues) have been happily using your
patches since they were posted with no issues. It's a shame they haven't
been included upstream a long time ago. However, it appears that a 
change in the version of NetworkManager or NetworkManager-openvpn
included in Fedora 20 have broken them. When I connect to a VPN server
that pushes IPv6 routing information, NetworkManager crashes completely.
The crash happens even if I've set the IPv6 method on the VPN connection
to "ignore". Also, the tunnel itself may go over IPv4, the crash still

<info> VPN connection 'foo' (IP6 Config Get) reply received.
<info> VPN Gateway:
<info> Tunnel Device: tun0
<info> IPv4 configuration:
<info>   Internal Gateway:
<info>   Internal Address:
<info>   Internal Prefix: 32
<info>   Internal Point-to-Point Address:
<info>   Maximum Segment Size (MSS): 0
<info>   Static Route:   Next Hop:
<info>   Static Route: [..SNIP..]
<info>   Forbid Default Route: yes
<info>   Internal DNS:
<info>   DNS Domain: ''
<info> IPv6 configuration:
<info>   Internal Address: 2001:db8::1000
<info>   Internal Prefix: 112
<info>   Internal Point-to-Point Address: 2001:db8::1
<info>   Maximum Segment Size (MSS): 0
<info>   Static Route: 2001:db8::/32   Next Hop: 2001:db8::1
<info>   Static Route: [..SNIP..]
<info>   Forbid Default Route: yes
<info>   DNS Domain: ''
<info> (tun0): link connected
ERROR:platform/nm-linux-platform.c:2212:build_rtnl_addr: assertion failed: (!nle)

Hope this can be fixed and updated patches posted...

Is that with NM git master, and if so, what date?  The reason I ask is
because we broke PtP addresses until 2013-12-02, fixed in commit
f099a04132241790c8f88a651ece49f5c2783d12.  The error you're getting may
well be the kernel complaining that it cannot reach the static route,
because it knows nothing about the next hop, because the PtP address
wasn't assigned correctly.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]