VPN connection issue (OpenVPN)

I’m running Gnome 3.38 (2020.11.04) and encounter the same issue I have in Manjaro (also Gnome 3.38) with connecting to VPN using my Cyberghost ovpn config. I get the “activation of network connection failed” error.

Not sure which log to check for this one? :slight_smile:
[edit] actually journalctl is giving me some leads I think.
Looks like some issue with the ovpn config which is not cutting it anymore in 3.38

hmm… a few warnings it seems, but not sure which one is actually tripping it up:

-- Logs begin at Thu 2020-11-26 14:39:53 GMT, end at Fri 2020-11-27 09:19:37 GMT. --
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor dashtopanelScrollview is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor StBoxLayout is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor Gjs_ui_dash_DashItemContainer is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor Gjs_dash-to-panel_jderose9_github_com_utils_DashToPanel_TaskbarAppIcon is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor StWidget is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor StWidget is on because it needs an allocation.
Nov 27 09:19:23 archlabs gnome-shell[11422]: Can't update stage views actor StDrawingArea is on because it needs an allocation.
Nov 27 09:19:35 archlabs audit[321]: USYS_CONFIG pid=321 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-activate uuid=d9faa1a1-9282-480c-91ad-e87eb252fb24 name=437962657267686F737420554B pid=11422 uid=1000 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
Nov 27 09:19:35 archlabs kernel: audit: type=1111 audit(1606468775.543:86): pid=321 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-activate uuid=d9faa1a1-9282-480c-91ad-e87eb252fb24 name=437962657267686F737420554B pid=11422 uid=1000 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
Nov 27 09:19:35 archlabs NetworkManager[321]: <info>  [1606468775.5473] audit: op="connection-activate" uuid="d9faa1a1-9282-480c-91ad-e87eb252fb24" name="Cyberghost UK" pid=11422 uid=1000 result="success"
Nov 27 09:19:35 archlabs NetworkManager[321]: <info>  [1606468775.5898] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: Started the VPN service, PID 82602
Nov 27 09:19:35 archlabs kernel: tun: Universal TUN/TAP device driver, 1.6
Nov 27 09:19:35 archlabs NetworkManager[321]: <info>  [1606468775.6148] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: Saw the service appear; activating connection
Nov 27 09:19:35 archlabs NetworkManager[321]: <info>  [1606468775.6683] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN plugin: state changed: starting (3)
Nov 27 09:19:35 archlabs NetworkManager[321]: <info>  [1606468775.6684] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN connection: (ConnectInteractive) reply received
Nov 27 09:19:35 archlabs nm-openvpn[82611]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
Nov 27 09:19:35 archlabs nm-openvpn[82611]: WARNING: file '/home/spaceman/Downloads/archlabs_openvpn/client.key' is group or others accessible
Nov 27 09:19:35 archlabs nm-openvpn[82611]: OpenVPN 2.5.0 [git:makepkg/a73072d8f780e888+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov  6 2020
Nov 27 09:19:35 archlabs nm-openvpn[82611]: library versions: OpenSSL 1.1.1h  22 Sep 2020, LZO 2.10
Nov 27 09:19:35 archlabs nm-openvpn[82611]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 27 09:19:35 archlabs nm-openvpn[82611]: TCP/UDP: Preserving recently used remote address: [AF_INET]95.154.200.142:443
Nov 27 09:19:35 archlabs nm-openvpn[82611]: UDP link local: (not bound)
Nov 27 09:19:35 archlabs nm-openvpn[82611]: UDP link remote: [AF_INET]95.154.200.142:443
Nov 27 09:19:35 archlabs nm-openvpn[82611]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Nov 27 09:19:36 archlabs nm-openvpn[82611]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1549'
Nov 27 09:19:36 archlabs nm-openvpn[82611]: WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth [null-digest]'
Nov 27 09:19:36 archlabs nm-openvpn[82611]: WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Nov 27 09:19:36 archlabs nm-openvpn[82611]: [berkshire-rack401.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]95.154.200.142:443
Nov 27 09:19:37 archlabs nm-openvpn[82611]: sitnl_send: rtnl: generic error (-101): Network is unreachable
Nov 27 09:19:37 archlabs nm-openvpn[82611]: TUN/TAP device tun0 opened
Nov 27 09:19:37 archlabs systemd-udevd[82606]: ethtool: autonegotiation is unset or enabled, the speed and duplex are not writable.
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2712] manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/4)
Nov 27 09:19:37 archlabs nm-openvpn[82611]: /usr/lib/nm-openvpn-service-openvpn-helper --debug 0 82602 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_2 --tun -- tun0 1500 1552 10.203.7.78 255.255.255.0 init
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2827] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN connection: (IP Config Get) reply received.
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2833] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",3:(tun0)]: VPN connection: (IP4 Config Get) reply received
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2841] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",3:(tun0)]: VPN connection: (IP6 Config Get) reply received
Nov 27 09:19:37 archlabs NetworkManager[321]: <warn>  [1606468777.2843] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",3:(tun0)]: invalid IP6 config received!
Nov 27 09:19:37 archlabs NetworkManager[321]: <warn>  [1606468777.2844] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",3:(tun0)]: VPN connection: did not receive valid IP config information
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2854] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN plugin: state changed: started (4)
Nov 27 09:19:37 archlabs nm-openvpn[82611]: GID set to nm-openvpn
Nov 27 09:19:37 archlabs nm-openvpn[82611]: UID set to nm-openvpn
Nov 27 09:19:37 archlabs nm-openvpn[82611]: Initialization Sequence Completed
Nov 27 09:19:37 archlabs nm-openvpn[82611]: event_wait : Interrupted system call (code=4)
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2881] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN plugin: state changed: stopping (5)
Nov 27 09:19:37 archlabs NetworkManager[321]: <info>  [1606468777.2882] vpn-connection[0x55e4f92760b0,d9faa1a1-9282-480c-91ad-e87eb252fb24,"Cyberghost UK",0]: VPN plugin: state changed: stopped (6)
Nov 27 09:19:37 archlabs nm-openvpn[82611]: net_addr_v4_del: 10.203.7.78 dev tun0
Nov 27 09:19:37 archlabs nm-openvpn[82611]: sitnl_send: rtnl: generic error (-1): Operation not permitted
Nov 27 09:19:37 archlabs nm-openvpn[82611]: Linux can't del IP from iface tun0
Nov 27 09:19:37 archlabs gnome-shell[11422]: Removing a network device that was not added
Nov 27 09:19:37 archlabs nm-openvpn[82611]: SIGTERM[hard,] received, process exiting

Bump for @spaceman

Seems like a networkmanger-related issue. Try to use your vpn client directly. See this thread, https://forum.manjaro.org/t/openvpn-2-5-0-has-some-connection-regressions/34785/17

That does indeed seem to be describing the same issue.
I’ll mess around a bit with using OpenVPN

Cheers @chroot

It seems to be related to Gnome on many sites. Read a few days back that one person rolled back network manager and it began to work again. Not testing Gnome at this time so I can’t really add to this.

1 Like

Most likely because all was well in 3.36
I’ll try and roll back

Look forward to your update.

1 Like

Forgot to reply… I rolled back and all was fine.
I just used

$ sudo pacman -U https://archive.archlinux.org/packages/o/openvpn/openvpn-2.4.9-2-x86_64.pkg.tar.zst
1 Like