[SailfishDevel] connman bug / connectivity

[Matthias Fulz]

Hi,


there seems to be a bug in connman for openvpn - here is what I did find out 
till now:

I'm working on a OpenVPN client for my Jolla, but it seems that connman is 
bugging around here:

this is the comman which will be used by connman:

openvpn --remote olz.dyndns.org --ca /home/nemo/OpenVPN/ca.crt --cert 
/home/nemo/OpenVPN/olz_mobile.crt --key /home/nemo/OpenVPN/olz_mobile.key --
comp-lzo --nobind --persist-key --client --script-security 2 --up 
/usr/lib/connman/scripts/openvpn-script --up-restart --setenv CONNMAN_BUSNAME 
:1.71 --setenv CONNMAN_INTERFACE net.connman.Task --setenv CONNMAN_PATH 
/task/0 --dev vpn0 --dev-type tun --persist-tun --route-noexec --ifconfig-
noexec --ping-restart 0

As it wasn't able to connect I've tried to run this command on my own:

[root at localhost OpenVPN]# openvpn --remote olz.dyndns.org --ca 
/home/nemo/OpenVPN/ca.crt --cert /home/nemo/OpenVPN/olz_mobile.crt --key 
/home/nemo/OpenVPN/olz_mobile.key --comp-lzo --nobind --persist-key --client 
--script-security 2 --up /usr/lib/connman/scripts/openvpn-script --up-restart 
--setenv CONNMAN_BUSNAME :1.71 --setenv CONNMAN_INTERFACE net.connman.Task --
setenv CONNMAN_PATH /task/0 --dev vpn0 --dev-type tun --persist-tun --route-
noexec --ifconfig-noexec --ping-restart 0
Sun Jan  5 01:41:41 2014 OpenVPN 2.2.2 armv7l-unknown-linux-gnueabi [SSL] 
[LZO2] [EPOLL] [PKCS11] [eurephia] built on Nov  1 2013
Sun Jan  5 01:41:41 2014 WARNING: No server certificate verification method has 
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Jan  5 01:41:41 2014 NOTE: the current --script-security setting may allow 
this configuration to call user-defined scripts
Sun Jan  5 01:41:41 2014 LZO compression initialized
Sun Jan  5 01:41:42 2014 UDPv4 link local: [undef]
Sun Jan  5 01:41:42 2014 UDPv4 link remote: 188.194.98.162:1194
Sun Jan  5 01:42:17 2014 [olz.dyndns.org] Peer Connection Initiated with 
188.194.98.162:1194
Sun Jan  5 01:42:20 2014 TUN/TAP device vpn0 opened
Sun Jan  5 01:42:20 2014 /usr/lib/connman/scripts/openvpn-script vpn0 1500 
1542 192.168.100.202 192.168.100.201 init
Sun Jan  5 01:42:20 2014 Initialization Sequence Completed

The issue is related to the script:

/usr/lib/connman/scripts/openvpn-script

which just seems to do nothing.

When I'm just removing the options:

--route-noexec --ifconfig-noexec

from the command above it is connecting fine:

Sun Jan  5 01:57:32 2014 OpenVPN 2.2.2 armv7l-unknown-linux-gnueabi [SSL] 
[LZO2] [EPOLL] [PKCS11] [eurephia] built on Nov  1 2013
Sun Jan  5 01:57:32 2014 WARNING: No server certificate verification method has 
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sun Jan  5 01:57:32 2014 NOTE: the current --script-security setting may allow 
this configuration to call user-defined scripts
Sun Jan  5 01:57:32 2014 LZO compression initialized
Sun Jan  5 01:57:33 2014 UDPv4 link local: [undef]
Sun Jan  5 01:57:33 2014 UDPv4 link remote: 188.194.98.162:1194
Sun Jan  5 01:58:07 2014 [olz.dyndns.org] Peer Connection Initiated with 
188.194.98.162:1194
Sun Jan  5 01:58:10 2014 TUN/TAP device vpn0 opened
Sun Jan  5 01:58:10 2014 /sbin/ip link set dev vpn0 up mtu 1500
Sun Jan  5 01:58:10 2014 /sbin/ip addr add dev vpn0 local 192.168.100.202 peer 
192.168.100.201
Sun Jan  5 01:58:10 2014 /usr/lib/connman/scripts/openvpn-script vpn0 1500 
1542 192.168.100.202 192.168.100.201 init
RTNETLINK answers: File exists
Sun Jan  5 01:58:10 2014 ERROR: Linux route add command failed: external 
program exited with error status: 2
Sun Jan  5 01:58:10 2014 Initialization Sequence Completed

ifconfig:

vpn0      Link encap:UNSPEC  HWaddr 
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:192.168.100.202  P-t-P:192.168.100.201  
Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)


Here are some logs:

Jan 05 23:47:48 localhost openvpn[2854]: /usr/lib/connman/scripts/openvpn-
script vpn0 1500 1542 192.168.100.202 192.168.100.201 init
Jan 05 23:47:48 localhost connmand[794]: Adding host route failed (No such 
process)
Jan 05 23:47:48 localhost connmand[794]: connman_inet_clear_ipv6_address: 
Invalid argument
Jan 05 23:47:48 localhost connmand[794]: connman_inet_clear_ipv6_address: 
Invalid argument
Jan 05 23:47:48 localhost connmand[794]: Skipping disconnect of 
/ril_0/context1, network is connecting.
Jan 05 23:47:48 localhost connmand[794]: Failed to change property: 
/ril_0/context1 org.ofono.ConnectionContext.Active: org.ofono.Error.InProgress 
Operation already in progress
Jan 05 23:47:48 localhost connmand[794]: notifier disconnect underflow
Jan 05 23:47:48 localhost connmand[794]: Deleting host route failed (No such 
device)
Jan 05 23:47:48 localhost connmand[794]: Deleting host route failed (No such 
device)
Jan 05 23:47:48 localhost connmand[794]: Removing default gateway route failed 
(No such device)
Jan 05 23:47:48 localhost connmand[794]: Skipping disconnect of 
/ril_0/context1, network is connecting.
Jan 05 23:47:48 localhost connmand[794]: connman_inet_clear_address: Invalid 
argument
Jan 05 23:47:48 localhost connmand[794]: connman_inet_clear_ipv6_address: 
Invalid argument
Jan 05 23:47:48 localhost connmand[794]: Failed to change property: 
/ril_0/context1 org.ofono.ConnectionContext.Active: org.ofono.Error.InProgress 
Operation already in progress

Would be great to get some help here :)

BR,

Matthias
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.sailfishos.org/pipermail/devel/attachments/20140106/b34fe4af/attachment.pgp>