PKCS#11 support in NetworkManager

English Network/Internet
1

Hello! I use openSUSE Slowroll and need to setup OpenVPN connection in NetworkManager with certificates on my token. I can establish connection by cli with following command: “sudo openvpn connection.ovpn”, when connection.ovpn contain

pkcs11-providers /usr/lib64/librtpkcs11ecp.so
pkcs11-id ‘Aktiv\x20Co\x2E/Rutoken\xxxxxxxxxxxxxxxxxxxxxxxxxxxxx’

In my corporate notebook with Ubuntu 22.04 I can connect by NetworkManager, it have “Certificates (TLS), PKCS#11” authentication type for openVPN in nm-conection-editor:

Снимок экрана от 2025-10-03 11-10-38
Снимок экрана от 2025-10-03 11-10-38652×601 76.1 KB

But I can’t find this option in OpenSUSE…
Снимок экрана от 2025-10-03 11-09-15
Снимок экрана от 2025-10-03 11-09-15848×667 38.1 KB

May be I need to install any extra packages?

2

What NetworkManager GUI frontend are you using?

3

NetworkManager-connection-editor-1.36.0-4.1.x86_64

4

I tried nm-connection-editor on Ubuntu 24.04 and it does not offer PKCS#11 for OpenVPN. Maybe you can find out what enables it on your Ubuntu installation.

I do not even see the string “providers” (or “PKCS#11”) in the NetworkManager-openvpn sources. You say it is corporate image - maybe your company is using custom build?

5

Looking around, there are several open PR for PKCS#11 support. It does look like you are using a customized package with additional patches.

6

Yes it is. I will contact tech support. Thank you!