Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Openvpn: failed connection

Linux Kernel, Network, and Services configuration.
Post Reply
Message
Author
User avatar
f.r3d
Posts: 75
Joined: 2016-07-28 16:39
Location: France
Has thanked: 4 times

Openvpn: failed connection

#1 Post by f.r3d »

Hi everyone,

I am trying to set up an openvpn connection through NetworkManager but it is not working. I pulled this from the system log:

Code: Select all

Aug 16 18:44:08 thinkpadt460 NetworkManager[3895]: <info>  [1629132248.1002] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: Started the VPN service, PID 6344
Aug 16 18:44:08 thinkpadt460 NetworkManager[3895]: <info>  [1629132248.1568] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN plugin: state changed: starting (3)
Aug 16 18:44:08 thinkpadt460 NetworkManager[3895]: <info>  [1629132248.1569] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN connection: (ConnectInteractive) reply received
Aug 16 18:44:08 thinkpadt460 nm-openvpn[6349]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
Aug 16 18:44:08 thinkpadt460 nm-openvpn[6349]: OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6569] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN connection: (IP Config Get) reply received.
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6653] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",9:(tun0)]: VPN connection: (IP4 Config Get) reply received
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6673] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",9:(tun0)]: VPN connection: (IP6 Config Get) reply received
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <warn>  [1629132249.6675] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",9:(tun0)]: VPN connection: did not receive valid IP config information
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6729] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN plugin: state changed: started (4)
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6729] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN plugin: state changed: stopping (5)
Aug 16 18:44:09 thinkpadt460 NetworkManager[3895]: <info>  [1629132249.6730] vpn-connection[0x55e41c1ba6d0,c78f22ca-9aa1-428d-9045-2f71edcd95c6,"CG_France",0]: VPN plugin: state changed: stopped (6)
Could you help me solve this please? Thank you for your help!
Debian 11 Gnome 64bit
Thinkpad T460
4X Intel Core i7-6600U / 8GB Ram / Intel HD Graphics 520 / 256GB SSD /

millpond
Posts: 698
Joined: 2014-06-25 04:56

Re: Openvpn: failed connection

#2 Post by millpond »

Not sure if this is the issue:
OVPN help is often silent about its critical requirmentL
/etc/openvpn/config
is where your .key file lives for encrypition , and the user/password file auth.txt
Most important it is where the .ovpn files for the server connections are kept

For example I would call:
openvpn -config canada-128bit.ovpn
to connect to a canadian server through my VPN service.

Each provider will have their own, and should provide them.

If you are creating your own server/client network, just keep in mind where your config files live.

jimgreentrying
Posts: 5
Joined: 2017-06-16 07:30
Has thanked: 1 time

Re: Openvpn: failed connection

#3 Post by jimgreentrying »

When I upgraded from Debian 10 to Debian 11, I also lost the ability to connect to my VPN from the network manager.

My log also had the line "<warn> ... did not receive valid IP config information" (along with another warning: "invalid IP6 config received").

I contacted my VPN provider and was pointed to the problem.

I run Debian Stable. The packages network-manager-openvpn-gnome & network-manager-openvpn are at version 1.8.12-2.

The fix for my connection problem requires those packages to be 1.8.14-3, the version currently in Debian Testing.

So, I removed the 1.8.12-2 versions.
I downloaded the .deb files for the 1.8.14-3 versions from https://packages.debian.org/ (Distribution: testing; or limit to suite "bookworm").
Using the gdebi installer, I installed the packages and my VPN was working again just like before.

From what I've read, mixing and matching packages from Testing into Stable is frowned upon as ill-advised/risky (to system robustness). As well, security updates are prioritized to Stable, so extra effort must be paid there.

I'm happy to have my VPN up and running, again.

User avatar
sunrat
Administrator
Administrator
Posts: 6412
Joined: 2006-08-29 09:12
Location: Melbourne, Australia
Has thanked: 116 times
Been thanked: 461 times

Re: Openvpn: failed connection

#4 Post by sunrat »

jimgreentrying wrote: 2021-09-28 03:10From what I've read, mixing and matching packages from Testing into Stable is frowned upon as ill-advised/risky (to system robustness).
Sometimes you might get away with it, sometimes it will destroy your system. It's package Russian Roulette. Usually depends on which package dependencies are needed.
Generally it is the last option to try if nothing else works. It is recommended to look in Backports for the package you need first.
“ computer users can be divided into 2 categories:
Those who have lost data
...and those who have not lost data YET ”
Remember to BACKUP!

jimgreentrying
Posts: 5
Joined: 2017-06-16 07:30
Has thanked: 1 time

Re: Openvpn: failed connection

#5 Post by jimgreentrying »

Thanks for reminding me about Backports. I bookmarked the Backports website a long time ago. I forgot why I bookmarked it. I never needed to consider it until this OpenVPN problem. At the present time, bullseye-backports does not provide the packages in question. They are only available from Testing. I will do my best to stay on top of things. The Backports method would be best, for sure.

?Syntax Error
Posts: 15
Joined: 2021-08-12 12:07
Has thanked: 1 time

Re: Openvpn: failed connection

#6 Post by ?Syntax Error »

I updated to the packages from Debian Testing; network-manager-openvpn-gnome & network-manager-openvpn at version 1.8.14-3, but my OpenVPN connection still isn't working. What should I do to troubleshoot? I use a gateway URL, username, password, and .crt file with LZO compression enabled.

?Syntax Error
Posts: 15
Joined: 2021-08-12 12:07
Has thanked: 1 time

Re: Openvpn: failed connection

#7 Post by ?Syntax Error »

Update: I ended up using L2TP/IPSec instead of OpenVPN since OpenVPN remains broken. L2TP/IPSec works for me and I have no DNS leaks. I recommend you also disable ipv6 via grub or kernel parameters.

Post Reply