strongswan
strongswan copied to clipboard
Gnome applet confusing UI for unreadable certificates
System (please complete the following information):
- OS: debian 11
Describe the bug nm-applet asks for certificate password although there is none set
To Reproduce Steps to reproduce the behavior:
- Ensure the certificates are readable by user only (e.g.
600
) - Ensure the private key does not have a password required for decryption
- Create a certificate based stronswan VPN
- Be surprised that you are asked for a private key password
Expected behavior Well, a fully working and connected VPN or at least a error with a hint what might be wrong, not something completely unrelated
Additional context Similar to #739 but this does addresses the UI handling of existing installation instead
The NM plugin doesn't know what's wrong with such a file, it just knows it failed to create a private_key_t
object from it without a password, so it asks the user for one and tries again. Since the parsing/loading is buried deep inside plugins, there is no more detailed error reporting at that point (but there is probably a log message, e.g. the pem plugin might log something like opening '...' failed: ...
). So this is very unlikely to change anytime soon (if at all).