[Bug 742759] New: Https connection problems with active openvp tunnel
https://bugzilla.novell.com/show_bug.cgi?id=742759 https://bugzilla.novell.com/show_bug.cgi?id=742759#c0 Summary: Https connection problems with active openvp tunnel Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: knuckster@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 When I connect to my corporate VPN server with NetworkManager and openvpn no https connections work anymore. All software becomes unable to receive or send data through https protocol - be it a browser or a svn client. It does not depend on whether the remote host is located in my private network or on the public Internet. Http works fine anywhere though. This is definitely related to openvpn and NetworkManager since when I disconnect from the VPN server https starts working again. I connect to the Internet through a Wi-Fi router. I tried to turn off the firewall on my machine - no effect. The problem is reproduced not in 100% of the cases but still very often. My VPN connection properties are following: TLS certificate with with a password protected private key. The cypher is AES-128-CBC. I use openSuse-12.1, Gnome-3.2, NetworkManager-0.9.1.90, NetworkManager-openvpn-0.9.0. Reproducible: Sometimes Steps to Reproduce: 1. Establish a VPN connection to an openvpn server 2. Try to send something through https Actual Results: Https connections are cut off. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c1
--- Comment #1 from Max Breev
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c2
Dirk Mueller
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c3
--- Comment #3 from Max Breev
does it work if you do "ip link set tun0 mtu 1000" ?
Yes! That helped. Except the device was tap0, not tun0. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c4
--- Comment #4 from Max Breev
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c5
Dirk Mueller
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c6
Vincent Untz
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c7
--- Comment #7 from Max Breev
There's a MTU option, visible in nm-connection-editor. Can you try it out? (VPN tab, advanced button, General tab) Yes, that did the thing. Though it would be nice, if it was a default "auto" option, which could perform MTU discovery automagically?
-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c8
Vincent Untz
https://bugzilla.novell.com/show_bug.cgi?id=742759
https://bugzilla.novell.com/show_bug.cgi?id=742759#c9
--- Comment #9 from Max Breev
participants (1)
-
bugzilla_noreply＠novell.com