strongswan icon indicating copy to clipboard operation
strongswan copied to clipboard

Gnome applet confusing UI for unreadable certificates

Open akallabeth opened this issue 2 years ago • 1 comments

System (please complete the following information):

  • OS: debian 11

Describe the bug nm-applet asks for certificate password although there is none set

To Reproduce Steps to reproduce the behavior:

  1. Ensure the certificates are readable by user only (e.g. 600)
  2. Ensure the private key does not have a password required for decryption
  3. Create a certificate based stronswan VPN
  4. Be surprised that you are asked for a private key password

Expected behavior Well, a fully working and connected VPN or at least a error with a hint what might be wrong, not something completely unrelated

Additional context Similar to #739 but this does addresses the UI handling of existing installation instead

akallabeth avatar Mar 15 '22 07:03 akallabeth

The NM plugin doesn't know what's wrong with such a file, it just knows it failed to create a private_key_t object from it without a password, so it asks the user for one and tries again. Since the parsing/loading is buried deep inside plugins, there is no more detailed error reporting at that point (but there is probably a log message, e.g. the pem plugin might log something like opening '...' failed: ...). So this is very unlikely to change anytime soon (if at all).

tobiasbrunner avatar Mar 15 '22 12:03 tobiasbrunner