linux-cli icon indicating copy to clipboard operation
linux-cli copied to clipboard

Cannot connect

Open demostanis opened this issue 3 years ago • 18 comments

Tried connecting to Netherlands, the client hangs forever. Same with the GUI. Related journal logs:

May 30 19:37:12 archlinux NetworkManager[480]: <info>  [1622396232.2717] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Started the VPN service, PID 34069
May 30 19:37:12 archlinux NetworkManager[480]: <info>  [1622396232.2796] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Saw the service appear; activating connection
May 30 19:37:12 archlinux NetworkManager[480]: <error> [1622396232.2904] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Failed to request VPN secrets #3: No agents were available for this request.

Free tier. IPv6 disabled in kernel. I also tried disabling UFW, with no success. Running latest version from AUR.

demostanis avatar May 30 '21 17:05 demostanis

Hey @demostanis

That issue seems to be related with the keyring. What keyring backend are you using ? Usually either kwallet(kwalletd5) or gnome-keyring is required.

calexandru2018 avatar May 31 '21 08:05 calexandru2018

Using gnome-keyring version 40.

demostanis avatar May 31 '21 10:05 demostanis

Hey @demostanis

Disabling IPv6 is not necessary and is usually discouraged, as our library is able to prevent IPv6 leaks.

Could you try the following:

  1. Go to https://account.protonmail.com/u/0/vpn/open-vpn-ike-v2
  2. Download one of the .ovpn files at your choice (matching user tier)
  3. Note down your OpenVPN username and password
  4. Open NetworkManager GUI -> VPN -> Add VPN -> Import form File then select your .ovpn file
  5. Fill in with your username (OpenVPN username)
  6. Fill in with your password (OpenVPN Password)
  7. Select to "store password only for this user"
  8. Save
  9. Try to connect

My suspicion is that will not work, but I would need to be sure. Also, after trying the previous steps, I want you to repeat the same steps from 1-6, but this time select for the password to be "Store for all users" and see if you're able to connect.

Please reply back with the results.

calexandru2018 avatar Jun 07 '21 14:06 calexandru2018

Using nm-applet and after adding a VPN connection, the application successfully connects. However, I haven't been prompted to "store password only for this user".

demostanis avatar Jun 07 '21 16:06 demostanis

@demostanis you're not prompted, you need to select it yourself.

calexandru2018 avatar Jun 07 '21 16:06 calexandru2018

I am neither prompted not asked to select it, all I see is image

demostanis avatar Jun 07 '21 17:06 demostanis

You need to press here 121060986-d107fd80-c7b2-11eb-8ae5-0b23413bfc67__01.png

calexandru2018 avatar Jun 07 '21 17:06 calexandru2018

I've set "store password for all users" and it's still able to connect.

demostanis avatar Jun 07 '21 17:06 demostanis

Hey @demostanis please follow the provided from my previous comment here

calexandru2018 avatar Jun 08 '21 22:06 calexandru2018

What did I miss? I did everything and was able to connect via the app

demostanis avatar Jun 08 '21 22:06 demostanis

https://github.com/ProtonVPN/linux-cli/issues/1#issuecomment-855997845

I did all of this and the VPN is supposedly connected. But my IP didn't change and WireShark does not display UDP VPN traffic.

$ nmcli connection show --active
NAME                          UUID                                  TYPE      DEVICE
nl-free-01.protonvpn.com.udp  8c3b351e-178b-4396-813f-4fa86c4401c6  vpn       ipv6leakintrf0
pvpn-ipv6leak-protection      c40e14b1-49f3-4f06-a631-20eca1a833fb  dummy     ipv6leakintrf0
enp0s3                        26fb7060-405a-4a36-a0c5-c2b43a0c9558  ethernet  enp0s3
tun0                          8c1b06ff-da1a-4a14-8743-fa0147a6223e  tun       tun0

How can I route my traffic through that connection?

RudiAusBuddeln avatar Jun 12 '21 11:06 RudiAusBuddeln

@RudiAusBuddeln it seems that you using native .ovpn file. Please remove the ipv6 leak protection interface with the following command: nmcli c del pvpn-ipv6leak-protection

Then just restart the vpn connection

calexandru2018 avatar Jun 12 '21 12:06 calexandru2018

Hmmm, it still didn't change my IP or anything.

I will just use the openvpn command directly. With my own recursive DNS. Thanks for your help though!

RudiAusBuddeln avatar Jun 16 '21 15:06 RudiAusBuddeln

I am having the same issue. Installed the AUR package version. Using a proper keyring.

hexpwn avatar Jun 24 '21 23:06 hexpwn

@hexpwn I just solved it by installing network-manager-applet from the arch repos and starting it. I have no idea why it works, but when nm-applet is running, everything works flawlessly.

3nt3 avatar Jul 07 '21 05:07 3nt3

@3nt3 what DE are you running?

calexandru2018 avatar Jul 07 '21 07:07 calexandru2018

@calexandru2018 none, I run bspwm

3nt3 avatar Jul 07 '21 17:07 3nt3

I had the same issue on Debian, also without any DE. Installing and running nm-applet solved the issue for me too. But ideally I wish I didn't need to run it.

n-peugnet avatar Jul 07 '21 17:07 n-peugnet