search

ProtonVPN / linux-cli

Official ProtonVPN Linux app (CLI)
https://protonvpn.com/download-linux
GNU General Public License v3.0
339 stars 44 forks source link

Cannot connect #1

Open demostanis opened 3 years ago

demostanis commented 3 years ago

Tried connecting to Netherlands, the client hangs forever. Same with the GUI. Related journal logs:

May 30 19:37:12 archlinux NetworkManager[480]: <info>  [1622396232.2717] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Started the VPN service, PID 34069
May 30 19:37:12 archlinux NetworkManager[480]: <info>  [1622396232.2796] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Saw the service appear; activating connection
May 30 19:37:12 archlinux NetworkManager[480]: <error> [1622396232.2904] vpn-connection[0x4a6cbc7c590,f920f4f7-5701-41d1-925e-bc8d4dfff257,"ProtonVPN NL-FREE#2",0]: Failed to request VPN secrets #3: No agents were available for this request.

Free tier. IPv6 disabled in kernel. I also tried disabling UFW, with no success. Running latest version from AUR.

calexandru2018 commented 3 years ago

Hey @demostanis

That issue seems to be related with the keyring. What keyring backend are you using ? Usually either kwallet(kwalletd5) or gnome-keyring is required.

demostanis commented 3 years ago

Using gnome-keyring version 40.

calexandru2018 commented 3 years ago

Hey @demostanis

Disabling IPv6 is not necessary and is usually discouraged, as our library is able to prevent IPv6 leaks.

Could you try the following:

  1. Go to https://account.protonmail.com/u/0/vpn/open-vpn-ike-v2
  2. Download one of the .ovpn files at your choice (matching user tier)
  3. Note down your OpenVPN username and password
  4. Open NetworkManager GUI -> VPN -> Add VPN -> Import form File then select your .ovpn file
  5. Fill in with your username (OpenVPN username)
  6. Fill in with your password (OpenVPN Password)
  7. Select to "store password only for this user"
  8. Save
  9. Try to connect

My suspicion is that will not work, but I would need to be sure. Also, after trying the previous steps, I want you to repeat the same steps from 1-6, but this time select for the password to be "Store for all users" and see if you're able to connect.

Please reply back with the results.

demostanis commented 3 years ago

Using nm-applet and after adding a VPN connection, the application successfully connects. However, I haven't been prompted to "store password only for this user".

calexandru2018 commented 3 years ago

@demostanis you're not prompted, you need to select it yourself.

demostanis commented 3 years ago

I am neither prompted not asked to select it, all I see is image

calexandru2018 commented 3 years ago

You need to press here 121060986-d107fd80-c7b2-11eb-8ae5-0b23413bfc67__01.png

demostanis commented 3 years ago

I've set "store password for all users" and it's still able to connect.

calexandru2018 commented 3 years ago

Hey @demostanis please follow the provided from my previous comment here

demostanis commented 3 years ago

What did I miss? I did everything and was able to connect via the app

RudiAusBuddeln commented 3 years ago

https://github.com/ProtonVPN/linux-cli/issues/1#issuecomment-855997845

I did all of this and the VPN is supposedly connected. But my IP didn't change and WireShark does not display UDP VPN traffic. 

$ nmcli connection show --active
NAME                          UUID                                  TYPE      DEVICE
nl-free-01.protonvpn.com.udp  8c3b351e-178b-4396-813f-4fa86c4401c6  vpn       ipv6leakintrf0
pvpn-ipv6leak-protection      c40e14b1-49f3-4f06-a631-20eca1a833fb  dummy     ipv6leakintrf0
enp0s3                        26fb7060-405a-4a36-a0c5-c2b43a0c9558  ethernet  enp0s3
tun0                          8c1b06ff-da1a-4a14-8743-fa0147a6223e  tun       tun0

How can I route my traffic through that connection?

calexandru2018 commented 3 years ago

@RudiAusBuddeln it seems that you using native .ovpn file. Please remove the ipv6 leak protection interface with the following command: nmcli c del pvpn-ipv6leak-protection

Then just restart the vpn connection

RudiAusBuddeln commented 3 years ago

Hmmm, it still didn't change my IP or anything.

I will just use the openvpn command directly. With my own recursive DNS. Thanks for your help though!

hexpwn commented 3 years ago

I am having the same issue. Installed the AUR package version. Using a proper keyring.

3nt3 commented 3 years ago

@hexpwn I just solved it by installing network-manager-applet from the arch repos and starting it. I have no idea why it works, but when nm-applet is running, everything works flawlessly.

calexandru2018 commented 3 years ago

@3nt3 what DE are you running?

3nt3 commented 3 years ago

@calexandru2018 none, I run bspwm

n-peugnet commented 3 years ago

I had the same issue on Debian, also without any DE. Installing and running nm-applet solved the issue for me too. But ideally I wish I didn't need to run it.