1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
  2. Dismiss Notice

Network manager SHA-256 not avilable for openvpn HMAC autenthication

Discussion in 'Support Area' started by asimov-solensan, Apr 7, 2017.

  1. asimov-solensan

    asimov-solensan Member

    Joined:
    Jan 8, 2010
    Messages:
    384
    Hello,

    Well the title sums it pretty clear, I have been setting a opnvpn server and made it work wonderfully in android. Still have got some problems in my desktop linux (mageia 4), and seems that is not possible to configure the client for pandora.

    In the HMAC authentication options go up to SHA-1, while on my linux box it shows much more options.

    I can guess that this is due to having a pretty outdated OS in general. Is there any way to solve this?
     
    Tags:
  2. TeDaDeS

    TeDaDeS Very Active Member

    Joined:
    Jan 15, 2004
    Messages:
    702
    Location:
    The Netherlands
  3. asimov-solensan

    asimov-solensan Member

    Joined:
    Jan 8, 2010
    Messages:
    384
    Indeed, that's exactly my problem. And seems the only option is update as I thought.

    I guess this update will be attached to a ton of OS components that won't update easily.

    I need a Pyra more and more everyday.

    Thanks for your interest by the way.
     
  4. TeDaDeS

    TeDaDeS Very Active Member

    Joined:
    Jan 15, 2004
    Messages:
    702
    Location:
    The Netherlands
    I assume you need to update the network manager to support the --auth parameters.

    Not sure if it would work but you could move/rename the original openvpn executable, put a script in its place that refers to the original openvpn executable but with the additional parameter "--auth sha512" and all the parameters passed to the replacement-script.
     
  5. levi

    levi Still fresh, damnit!

    Joined:
    Oct 6, 2008
    Messages:
    7,896
    Location:
    Somewhere off the coast of the EU
    I've done a bit of digging around that bug. I can't see any diffs in that section quoted in the attached gnome bug, so I suspect whoever thought that code was wrong was mistaken, and it's been taken care of elsewhere. The latest version when the bug was closed was 1.1.91, and debian up to jessie is still messing around with 0.9 versions. Debian Stretch contains a much more recent version though, which should be fixed.

    I'm not sure this is impossible to get patched in super zaxxon, but it depends on how much of a risk there is upversioning all of those dependencies. I've not yet checked the changes in depended versions between what we have and what stretch has.
     
  6. asimov-solensan

    asimov-solensan Member

    Joined:
    Jan 8, 2010
    Messages:
    384
    I won't mess with the base OS of pandora being as delicate as it is. And Idon't expect anyone to lose any taime on this.

    I just configured a openvpn server and was doing some tests, if pandora had the features of Pyra I would really like to got this VPN working, but given the limitations it has, I wouldn't use much anyhow.

    I wanted to ask to have a bit more information about this topic.

    Thanks.
     
    levi likes this.

Share This Page

Loading...