Skip to content

Instantly share code, notes, and snippets.

@kbrosnan
Created January 22, 2014 05:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kbrosnan/8553849 to your computer and use it in GitHub Desktop.
Save kbrosnan/8553849 to your computer and use it in GitHub Desktop.
Fedora 11
Connecting to VPN will initially fail in vanilla Fedora 11, but that can be fixed by adding these lines to /etc/dbus-1/system.d/nm-openvpn-service.conf next to the other similar lines, inside the busconfig element (instructions adapted from above link, with caveats noted there -- but for a single-user machine it appears there are no downsides):
<policy at_console="true">
<allow own="org.freedesktop.NetworkManager.openvpn"/>
<allow send_destination="org.freedesktop.NetworkManager.openvpn"/>
</policy>
Fedora 14 and up
SELinux restricts openvpn to only accessing certain contexts, so copy the certificate and key files you extracted from the zip into a subdirectory of ~/.cert/, edit them as appropriate for that location, then run restorecon -R -v ~/.cert; with these changes openvpn should be able to access your VPN info and use it. This particular directory is built into the SELinux rules that ship with Fedora, so you can't use another.
In Fedora 18, the ability to import a configuration is hard to find. Open network settings, click "+", Select "VPN", and then on the dialog asking for the type of VPN, you will find "import" as the last option.
In the GUI, it doesn't show you what path it's pulling the certificate files from. Unless you import the .ovpn files with the right paths included, all will look well but you'll see errors in your syslog about being unable to find the files. In the GUI, click on each, navigate to the cert or key under ~/.cert, and select. Note that there are four files; the TLS key is specified under Advanced -> Security.
VPN configurations are stored in /etc/NetworkManager/system-connections/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment