Error Connecting to VPN

[6lackHeart]

I'm using the free trial of protonvpn, I have installed openresolv, and everything is up to date. Using Ubuntu 16, and on a wireless connection. I followed the setup guide on proton's website, and everything functions, but I cannot connect to the VPN sadly. This is the error I get:

~$ sudo PROTONVPN_CLI_LOG=true ./protonvpn-cli.sh -f Fetching ProtonVPN servers... [] CLI logging mode enabled. [] Logs path: /home/b/.protonvpn-cli/connection_logs Connecting... [!] Error connecting to VPN.

Here is my log file:

Mon Sep 3 11:45:30 2018 us=513380 Current Parameter Settings: Mon Sep 3 11:45:30 2018 us=513421 config = '/home/b/.protonvpn-cli/protonvpn_openvpn_config.conf' Mon Sep 3 11:45:30 2018 us=513431 mode = 0 Mon Sep 3 11:45:30 2018 us=513437 persist_config = DISABLED Mon Sep 3 11:45:30 2018 us=513444 persist_mode = 1 Mon Sep 3 11:45:30 2018 us=513450 show_ciphers = DISABLED Mon Sep 3 11:45:30 2018 us=513456 show_digests = DISABLED Mon Sep 3 11:45:30 2018 us=513462 show_engines = DISABLED Mon Sep 3 11:45:30 2018 us=513467 genkey = DISABLED Mon Sep 3 11:45:30 2018 us=513473 key_pass_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513479 show_tls_ciphers = DISABLED Mon Sep 3 11:45:30 2018 us=513485 Connection profiles [default]: Mon Sep 3 11:45:30 2018 us=513491 proto = udp Mon Sep 3 11:45:30 2018 us=513497 local = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513503 local_port = 0 Mon Sep 3 11:45:30 2018 us=513509 remote = 'us-free-01.protonvpn.com' Mon Sep 3 11:45:30 2018 us=513514 remote_port = 1194 Mon Sep 3 11:45:30 2018 us=513520 remote_float = DISABLED Mon Sep 3 11:45:30 2018 us=513526 bind_defined = DISABLED Mon Sep 3 11:45:30 2018 us=513532 bind_local = DISABLED Mon Sep 3 11:45:30 2018 us=513537 connect_retry_seconds = 5 Mon Sep 3 11:45:30 2018 us=513543 connect_timeout = 10 Mon Sep 3 11:45:30 2018 us=513549 connect_retry_max = 0 Mon Sep 3 11:45:30 2018 us=513555 socks_proxy_server = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513561 socks_proxy_port = 0 Mon Sep 3 11:45:30 2018 us=513567 socks_proxy_retry = DISABLED Mon Sep 3 11:45:30 2018 us=513572 tun_mtu = 1500 Mon Sep 3 11:45:30 2018 us=513578 tun_mtu_defined = ENABLED Mon Sep 3 11:45:30 2018 us=513584 link_mtu = 1500 Mon Sep 3 11:45:30 2018 us=513590 link_mtu_defined = DISABLED Mon Sep 3 11:45:30 2018 us=513595 tun_mtu_extra = 32 Mon Sep 3 11:45:30 2018 us=513601 tun_mtu_extra_defined = ENABLED Mon Sep 3 11:45:30 2018 us=513607 mtu_discover_type = -1 Mon Sep 3 11:45:30 2018 us=513613 fragment = 0 Mon Sep 3 11:45:30 2018 us=513618 mssfix = 1450 Mon Sep 3 11:45:30 2018 us=513624 explicit_exit_notification = 0 Mon Sep 3 11:45:30 2018 us=513630 Connection profiles END Mon Sep 3 11:45:30 2018 us=513636 remote_random = ENABLED Mon Sep 3 11:45:30 2018 us=513642 ipchange = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513648 dev = 'tun' Mon Sep 3 11:45:30 2018 us=513654 dev_type = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513660 dev_node = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513665 lladdr = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513671 topology = 1 Mon Sep 3 11:45:30 2018 us=513677 tun_ipv6 = DISABLED Mon Sep 3 11:45:30 2018 us=513683 ifconfig_local = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513689 ifconfig_remote_netmask = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513694 ifconfig_noexec = DISABLED Mon Sep 3 11:45:30 2018 us=513700 ifconfig_nowarn = DISABLED Mon Sep 3 11:45:30 2018 us=513705 ifconfig_ipv6_local = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513711 ifconfig_ipv6_netbits = 0 Mon Sep 3 11:45:30 2018 us=513717 ifconfig_ipv6_remote = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513723 shaper = 0 Mon Sep 3 11:45:30 2018 us=513729 mtu_test = 0 Mon Sep 3 11:45:30 2018 us=513734 mlock = DISABLED Mon Sep 3 11:45:30 2018 us=513740 keepalive_ping = 0 Mon Sep 3 11:45:30 2018 us=513746 keepalive_timeout = 0 Mon Sep 3 11:45:30 2018 us=513752 inactivity_timeout = 0 Mon Sep 3 11:45:30 2018 us=513758 ping_send_timeout = 0 Mon Sep 3 11:45:30 2018 us=513763 ping_rec_timeout = 0 Mon Sep 3 11:45:30 2018 us=513769 ping_rec_timeout_action = 0 Mon Sep 3 11:45:30 2018 us=513775 ping_timer_remote = DISABLED Mon Sep 3 11:45:30 2018 us=513781 remap_sigusr1 = 0 Mon Sep 3 11:45:30 2018 us=513786 persist_tun = ENABLED Mon Sep 3 11:45:30 2018 us=513792 persist_local_ip = DISABLED Mon Sep 3 11:45:30 2018 us=513798 persist_remote_ip = DISABLED Mon Sep 3 11:45:30 2018 us=513803 persist_key = ENABLED Mon Sep 3 11:45:30 2018 us=513809 passtos = DISABLED Mon Sep 3 11:45:30 2018 us=513815 resolve_retry_seconds = 1000000000 Mon Sep 3 11:45:30 2018 us=513827 username = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513833 groupname = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513839 chroot_dir = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513844 cd_dir = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513850 writepid = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513856 up_script = '/etc/openvpn/update-resolv-conf' Mon Sep 3 11:45:30 2018 us=513862 down_script = '/etc/openvpn/update-resolv-conf' Mon Sep 3 11:45:30 2018 us=513867 down_pre = DISABLED Mon Sep 3 11:45:30 2018 us=513873 up_restart = DISABLED Mon Sep 3 11:45:30 2018 us=513879 up_delay = DISABLED Mon Sep 3 11:45:30 2018 us=513885 daemon = ENABLED Mon Sep 3 11:45:30 2018 us=513890 inetd = 0 Mon Sep 3 11:45:30 2018 us=513896 log = ENABLED Mon Sep 3 11:45:30 2018 us=513902 suppress_timestamps = DISABLED Mon Sep 3 11:45:30 2018 us=513908 nice = 0 Mon Sep 3 11:45:30 2018 us=513913 verbosity = 4 Mon Sep 3 11:45:30 2018 us=513919 mute = 0 Mon Sep 3 11:45:30 2018 us=513925 gremlin = 0 Mon Sep 3 11:45:30 2018 us=513931 status_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513937 status_file_version = 1 Mon Sep 3 11:45:30 2018 us=513942 status_file_update_freq = 60 Mon Sep 3 11:45:30 2018 us=513948 occ = ENABLED Mon Sep 3 11:45:30 2018 us=513954 rcvbuf = 0 Mon Sep 3 11:45:30 2018 us=513959 sndbuf = 0 Mon Sep 3 11:45:30 2018 us=513965 mark = 0 Mon Sep 3 11:45:30 2018 us=513971 sockflags = 0 Mon Sep 3 11:45:30 2018 us=513976 fast_io = ENABLED Mon Sep 3 11:45:30 2018 us=513982 lzo = 1 Mon Sep 3 11:45:30 2018 us=513988 route_script = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=513994 route_default_gateway = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514000 route_default_metric = 0 Mon Sep 3 11:45:30 2018 us=514006 route_noexec = DISABLED Mon Sep 3 11:45:30 2018 us=514011 route_delay = 0 Mon Sep 3 11:45:30 2018 us=514017 route_delay_window = 30 Mon Sep 3 11:45:30 2018 us=514023 route_delay_defined = DISABLED Mon Sep 3 11:45:30 2018 us=514029 route_nopull = DISABLED Mon Sep 3 11:45:30 2018 us=514035 route_gateway_via_dhcp = DISABLED Mon Sep 3 11:45:30 2018 us=514041 max_routes = 100 Mon Sep 3 11:45:30 2018 us=514047 allow_pull_fqdn = DISABLED Mon Sep 3 11:45:30 2018 us=514053 management_addr = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514058 management_port = 0 Mon Sep 3 11:45:30 2018 us=514064 management_user_pass = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514070 management_log_history_cache = 250 Mon Sep 3 11:45:30 2018 us=514076 management_echo_buffer_size = 100 Mon Sep 3 11:45:30 2018 us=514082 management_write_peer_info_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514088 management_client_user = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514093 management_client_group = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514099 management_flags = 0 Mon Sep 3 11:45:30 2018 us=514105 shared_secret_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514111 key_direction = 2 Mon Sep 3 11:45:30 2018 us=514116 ciphername_defined = ENABLED Mon Sep 3 11:45:30 2018 us=514122 ciphername = 'AES-256-CBC' Mon Sep 3 11:45:30 2018 us=514128 authname_defined = ENABLED Mon Sep 3 11:45:30 2018 us=514134 authname = 'SHA512' Mon Sep 3 11:45:30 2018 us=514139 prng_hash = 'SHA1' Mon Sep 3 11:45:30 2018 us=514145 prng_nonce_secret_len = 16 Mon Sep 3 11:45:30 2018 us=514151 keysize = 0 Mon Sep 3 11:45:30 2018 us=514157 engine = DISABLED Mon Sep 3 11:45:30 2018 us=514163 replay = ENABLED Mon Sep 3 11:45:30 2018 us=514169 mute_replay_warnings = DISABLED Mon Sep 3 11:45:30 2018 us=514174 replay_window = 64 Mon Sep 3 11:45:30 2018 us=514180 replay_time = 15 Mon Sep 3 11:45:30 2018 us=514186 packet_id_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514192 use_iv = ENABLED Mon Sep 3 11:45:30 2018 us=514198 test_crypto = DISABLED Mon Sep 3 11:45:30 2018 us=514204 tls_server = DISABLED Mon Sep 3 11:45:30 2018 us=514209 tls_client = ENABLED Mon Sep 3 11:45:30 2018 us=514215 key_method = 2 Mon Sep 3 11:45:30 2018 us=514224 ca_file = '[[INLINE]]' Mon Sep 3 11:45:30 2018 us=514230 ca_path = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514235 dh_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514241 cert_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514247 extra_certs_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514253 priv_key_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514259 pkcs12_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514264 cipher_list = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514270 tls_verify = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514276 tls_export_cert = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514282 verify_x509_type = 0 Mon Sep 3 11:45:30 2018 us=514288 verify_x509_name = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514293 crl_file = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514299 ns_cert_type = 0 Mon Sep 3 11:45:30 2018 us=514305 remote_cert_ku[i] = 160 Mon Sep 3 11:45:30 2018 us=514311 remote_cert_ku[i] = 136 Mon Sep 3 11:45:30 2018 us=514317 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514322 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514328 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514334 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514339 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514345 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514350 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514356 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514362 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514367 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514373 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514379 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514384 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514390 remote_cert_ku[i] = 0 Mon Sep 3 11:45:30 2018 us=514396 remote_cert_eku = 'TLS Web Server Authentication' Mon Sep 3 11:45:30 2018 us=514401 ssl_flags = 0 Mon Sep 3 11:45:30 2018 us=514407 tls_timeout = 2 Mon Sep 3 11:45:30 2018 us=514413 renegotiate_bytes = 0 Mon Sep 3 11:45:30 2018 us=514419 renegotiate_packets = 0 Mon Sep 3 11:45:30 2018 us=514424 renegotiate_seconds = 0 Mon Sep 3 11:45:30 2018 us=514430 handshake_window = 60 Mon Sep 3 11:45:30 2018 us=514436 transition_window = 3600 Mon Sep 3 11:45:30 2018 us=514442 single_session = DISABLED Mon Sep 3 11:45:30 2018 us=514448 push_peer_info = DISABLED Mon Sep 3 11:45:30 2018 us=514453 tls_exit = DISABLED Mon Sep 3 11:45:30 2018 us=514459 tls_auth_file = '[[INLINE]]' Mon Sep 3 11:45:30 2018 us=514465 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514471 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514477 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514482 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514488 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514494 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514501 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514508 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514513 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514519 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514524 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514530 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514536 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514541 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514547 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514552 pkcs11_protected_authentication = DISABLED Mon Sep 3 11:45:30 2018 us=514559 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514564 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514570 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514575 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514585 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514591 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514596 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514602 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514607 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514613 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514619 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514624 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514630 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514635 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514641 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514646 pkcs11_private_mode = 00000000 Mon Sep 3 11:45:30 2018 us=514652 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514657 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514663 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514669 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514674 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514680 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514685 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514691 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514696 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514702 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514707 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514713 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514719 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514724 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514730 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514735 pkcs11_cert_private = DISABLED Mon Sep 3 11:45:30 2018 us=514741 pkcs11_pin_cache_period = -1 Mon Sep 3 11:45:30 2018 us=514747 pkcs11_id = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514753 pkcs11_id_management = DISABLED Mon Sep 3 11:45:30 2018 us=514760 server_network = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514766 server_netmask = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514776 server_network_ipv6 = :: Mon Sep 3 11:45:30 2018 us=514782 server_netbits_ipv6 = 0 Mon Sep 3 11:45:30 2018 us=514788 server_bridge_ip = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514795 server_bridge_netmask = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514801 server_bridge_pool_start = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514807 server_bridge_pool_end = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514813 ifconfig_pool_defined = DISABLED Mon Sep 3 11:45:30 2018 us=514819 ifconfig_pool_start = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514826 ifconfig_pool_end = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514832 ifconfig_pool_netmask = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514838 ifconfig_pool_persist_filename = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514844 ifconfig_pool_persist_refresh_freq = 600 Mon Sep 3 11:45:30 2018 us=514849 ifconfig_ipv6_pool_defined = DISABLED Mon Sep 3 11:45:30 2018 us=514855 ifconfig_ipv6_pool_base = :: Mon Sep 3 11:45:30 2018 us=514861 ifconfig_ipv6_pool_netbits = 0 Mon Sep 3 11:45:30 2018 us=514867 n_bcast_buf = 256 Mon Sep 3 11:45:30 2018 us=514873 tcp_queue_limit = 64 Mon Sep 3 11:45:30 2018 us=514878 real_hash_size = 256 Mon Sep 3 11:45:30 2018 us=514884 virtual_hash_size = 256 Mon Sep 3 11:45:30 2018 us=514890 client_connect_script = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514896 learn_address_script = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514902 client_disconnect_script = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514907 client_config_dir = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=514913 ccd_exclusive = DISABLED Mon Sep 3 11:45:30 2018 us=514919 tmp_dir = '/tmp' Mon Sep 3 11:45:30 2018 us=514925 push_ifconfig_defined = DISABLED Mon Sep 3 11:45:30 2018 us=514931 push_ifconfig_local = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514937 push_ifconfig_remote_netmask = 0.0.0.0 Mon Sep 3 11:45:30 2018 us=514946 push_ifconfig_ipv6_defined = DISABLED Mon Sep 3 11:45:30 2018 us=514952 push_ifconfig_ipv6_local = ::/0 Mon Sep 3 11:45:30 2018 us=514958 push_ifconfig_ipv6_remote = :: Mon Sep 3 11:45:30 2018 us=514964 enable_c2c = DISABLED Mon Sep 3 11:45:30 2018 us=514970 duplicate_cn = DISABLED Mon Sep 3 11:45:30 2018 us=514975 cf_max = 0 Mon Sep 3 11:45:30 2018 us=514981 cf_per = 0 Mon Sep 3 11:45:30 2018 us=514987 max_clients = 1024 Mon Sep 3 11:45:30 2018 us=514993 max_routes_per_client = 256 Mon Sep 3 11:45:30 2018 us=514999 auth_user_pass_verify_script = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=515005 auth_user_pass_verify_script_via_file = DISABLED Mon Sep 3 11:45:30 2018 us=515011 port_share_host = '[UNDEF]' Mon Sep 3 11:45:30 2018 us=515016 port_share_port = 0 Mon Sep 3 11:45:30 2018 us=515022 client = ENABLED Mon Sep 3 11:45:30 2018 us=515028 pull = ENABLED Mon Sep 3 11:45:30 2018 us=515034 auth_user_pass_file = '/home/b/.protonvpn-cli/protonvpn_openvpn_credentials' Mon Sep 3 11:45:30 2018 us=515041 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017 Mon Sep 3 11:45:30 2018 us=515051 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Mon Sep 3 11:45:30 2018 us=515410 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Mon Sep 3 11:45:30 2018 us=515718 Control Channel Authentication: tls-auth using INLINE static key file Mon Sep 3 11:45:30 2018 us=515740 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Mon Sep 3 11:45:30 2018 us=515750 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Mon Sep 3 11:45:30 2018 us=515768 LZO compression initialized Mon Sep 3 11:45:30 2018 us=515817 Control Channel MTU parms [ L:1634 D:1140 EF:110 EB:0 ET:0 EL:3 ] Mon Sep 3 11:45:30 2018 us=515841 Socket Buffers: R=[212992->212992] S=[212992->212992] Mon Sep 3 11:45:30 2018 us=580394 Data Channel MTU parms [ L:1634 D:1450 EF:102 EB:143 ET:32 EL:3 AF:3/1 ] Mon Sep 3 11:45:30 2018 us=580464 Local Options String: 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client' Mon Sep 3 11:45:30 2018 us=580480 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server' Mon Sep 3 11:45:30 2018 us=580507 Local Options hash (VER=V4): '6a152ec4' Mon Sep 3 11:45:30 2018 us=580527 Expected Remote Options hash (VER=V4): 'e1f65e10' Mon Sep 3 11:45:30 2018 us=580547 UDPv4 link local: [undef] Mon Sep 3 11:45:30 2018 us=580563 UDPv4 link remote: [AF_INET]204.188.215.220:1194 Mon Sep 3 11:45:30 2018 us=703495 TLS: Initial packet from [AF_INET]204.188.215.220:1194, sid=e964dcf2 06ee9311 Mon Sep 3 11:45:30 2018 us=703660 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Mon Sep 3 11:45:30 2018 us=950898 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA Mon Sep 3 11:45:30 2018 us=951444 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1 Mon Sep 3 11:45:30 2018 us=951918 Validating certificate key usage Mon Sep 3 11:45:30 2018 us=951940 ++ Certificate has key usage 00a0, expects 00a0 Mon Sep 3 11:45:30 2018 us=951952 VERIFY KU OK Mon Sep 3 11:45:30 2018 us=951967 Validating certificate extended key usage Mon Sep 3 11:45:30 2018 us=951980 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Mon Sep 3 11:45:30 2018 us=951992 VERIFY EKU OK Mon Sep 3 11:45:30 2018 us=952003 VERIFY OK: depth=0, CN=us-il-102.protonvpn.com Mon Sep 3 11:45:31 2018 us=842208 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Mon Sep 3 11:45:31 2018 us=842295 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication Mon Sep 3 11:45:31 2018 us=842342 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Mon Sep 3 11:45:31 2018 us=842368 Data Channel Decrypt: Using 512 bit message hash 'SHA512' for HMAC authentication Mon Sep 3 11:45:31 2018 us=842466 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Mon Sep 3 11:45:31 2018 us=842522 [us-il-102.protonvpn.com] Peer Connection Initiated with [AF_INET]204.188.215.220:1194 Mon Sep 3 11:45:34 2018 us=215190 SENT CONTROL [us-il-102.protonvpn.com]: 'PUSH_REQUEST' (status=1) Mon Sep 3 11:45:34 2018 us=340624 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.8.1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,comp-lzo no,route-gateway 10.8.8.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.8.48 255.255.255.0,peer-id 46' Mon Sep 3 11:45:34 2018 us=340861 OPTIONS IMPORT: timers and/or timeouts modified Mon Sep 3 11:45:34 2018 us=340895 OPTIONS IMPORT: explicit notify parm(s) modified Mon Sep 3 11:45:34 2018 us=340916 OPTIONS IMPORT: LZO parms modified Mon Sep 3 11:45:34 2018 us=340935 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Mon Sep 3 11:45:34 2018 us=340969 Socket Buffers: R=[212992->425984] S=[212992->425984] Mon Sep 3 11:45:34 2018 us=340989 OPTIONS IMPORT: --ifconfig/up options modified Mon Sep 3 11:45:34 2018 us=341007 OPTIONS IMPORT: route options modified Mon Sep 3 11:45:34 2018 us=341023 OPTIONS IMPORT: route-related options modified Mon Sep 3 11:45:34 2018 us=341038 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Mon Sep 3 11:45:34 2018 us=341054 OPTIONS IMPORT: peer-id set Mon Sep 3 11:45:34 2018 us=341071 OPTIONS IMPORT: adjusting link_mtu to 1637 Mon Sep 3 11:45:34 2018 us=341343 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=wlx9444528a5bd0 HWADDR=94:44:52:8a:5b:d0 Mon Sep 3 11:45:34 2018 us=341960 TUN/TAP device tun0 opened Mon Sep 3 11:45:34 2018 us=342115 TUN/TAP TX queue length set to 100 Mon Sep 3 11:45:34 2018 us=342178 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mon Sep 3 11:45:34 2018 us=342225 /sbin/ip link set dev tun0 up mtu 1500 Mon Sep 3 11:45:34 2018 us=344672 /sbin/ip addr add dev tun0 10.8.8.48/24 broadcast 10.8.8.255 Mon Sep 3 11:45:34 2018 us=351383 /etc/openvpn/update-resolv-conf tun0 1500 1637 10.8.8.48 255.255.255.0 init dhcp-option DNS 10.8.8.1 Mon Sep 3 11:45:34 2018 us=356757 /sbin/ip route add 204.188.215.220/32 via 192.168.0.1 Mon Sep 3 11:45:34 2018 us=357317 /sbin/ip route add 0.0.0.0/1 via 10.8.8.1 Mon Sep 3 11:45:34 2018 us=357874 /sbin/ip route add 128.0.0.0/1 via 10.8.8.1 Mon Sep 3 11:45:34 2018 us=358361 Initialization Sequence Completed Mon Sep 3 11:46:42 2018 us=910741 event_wait : Interrupted system call (code=4) Mon Sep 3 11:46:42 2018 us=910772 SIGTERM received, sending exit notification to peer Mon Sep 3 11:46:43 2018 us=429996 event_wait : Interrupted system call (code=4) Mon Sep 3 11:46:43 2018 us=430151 TCP/UDP: Closing socket Mon Sep 3 11:46:43 2018 us=430180 /sbin/ip route del 204.188.215.220/32 Mon Sep 3 11:46:43 2018 us=430714 /sbin/ip route del 0.0.0.0/1 Mon Sep 3 11:46:43 2018 us=431251 /sbin/ip route del 128.0.0.0/1 Mon Sep 3 11:46:43 2018 us=431949 Closing TUN/TAP interface Mon Sep 3 11:46:43 2018 us=431972 /sbin/ip addr del dev tun0 10.8.8.48/24 Mon Sep 3 11:46:43 2018 us=460721 /etc/openvpn/update-resolv-conf tun0 1500 1637 10.8.8.48 255.255.255.0 init Failed to try-restart unbound.service: Unit unbound.service not found. Mon Sep 3 11:46:43 2018 us=488807 WARNING: Failed running command (--up/--down): external program exited with error status: 5 Mon Sep 3 11:46:43 2018 us=488840 Exiting due to fatal error

It keeps getting a fatal error, and I was wondering if anyone had any ideas as to why I can't connect to the VPN?

[xilopaint]

It's there, but for whatever reason it's not working. /etc/openvpn/update-resolv-conf is meant to update /etc/resolv.conf.

Well, you can make a backup of your /etc/resolv.conf file and after that replace the contents of /etc/resolv.confwith this:

# ProtonVPN DNS - protonvpn-cli
nameserver 10.8.8.1

So you try to connect manually to OpenVPN and see what happens. If it still not work you can restore /etc/resolv.conf to its previous state. I don't have a clue if it can change anything but I would try this. haha

[6lackHeart]

It wouldn't complete the initialization sequence. I'm gonna restore it back to how it was.

[xilopaint]

It wouldn't complete the initialization sequence.

So you can try to connect and after that change /etc/resolv.conf to:

# ProtonVPN DNS - protonvpn-cli
nameserver 10.8.8.1

If it doesn't work you can restore it back.

[6lackHeart]

This is the output when I edit the /etc/resolv.conf with # ProtonVPN DNS - protonvpn-cli nameserver 10.8.8.1

Tue Sep 4 12:39:30 2018 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Tue Sep 4 12:39:30 2018 Control Channel Authentication: tls-auth using INLINE static key file Tue Sep 4 12:39:30 2018 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Tue Sep 4 12:39:30 2018 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Tue Sep 4 12:39:30 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]

[xilopaint]

Have you edited it before or after connecting to OpenVPN?

[6lackHeart]

I think your fix made it work @xilopaint the initialization sequence was completed and I can surf the net, and I checked ipleak and it says I'm in the state of Virginia which I'm not. Are there other ways to test how its working besides ipleak? I mean I think its working, I just wanted to make sure.

[6lackHeart]

I edited etc/resolv.confafter I was connected like you suggested, and it worked.

[xilopaint]

Great! Post the output for dig google.com.

[6lackHeart]

Here is the output for dig google.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> google.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14482 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;google.com. IN A

;; ANSWER SECTION: google.com. 255 IN A 172.217.10.78

;; AUTHORITY SECTION: google.com. 109239 IN NS ns1.google.com. google.com. 109239 IN NS ns3.google.com. google.com. 109239 IN NS ns4.google.com. google.com. 109239 IN NS ns2.google.com.

;; ADDITIONAL SECTION: ns1.google.com. 109239 IN A 216.239.32.10 ns2.google.com. 109239 IN A 216.239.34.10 ns3.google.com. 109239 IN A 216.239.36.10 ns4.google.com. 109239 IN A 216.239.38.10

;; Query time: 96 msec ;; SERVER: 10.8.8.1#53(10.8.8.1) ;; WHEN: Tue Sep 04 18:29:01 HST 2018 ;; MSG SIZE rcvd: 191

I disconnected it, and had to redo the etc/resolv.conf fix. I guess that is just something I'll have to remember to do to get it to work.

[xilopaint]

Are there other ways to test how its working besides ipleak? I mean I think its working, I just wanted to make sure.

If ipleak shows a ProtonVPN IP instead of yours you can be sure it's successfully connected to the ProtonVPN server. The output of dig also looks fine. It shows the ProtonVPN DNS.

[6lackHeart]

Well it took some doing, but I can't thank you enough for sticking with me through it, and helping me out. I appreciate it a lot. Thank you @xilopaint

[xilopaint]

I disconnected it, and had to redo the etc/resolv.conf fix. I guess that is just something I'll have to remember to do to get it to work.

It's the root cause of the problem. Changing /etc/resolv.conf shouldn't be necessary because /etc/openvpn/update-resolv-conf is meant to take care of this automatically. For whatever reason DNS management is not working for you.

You can try to rename your /etc/openvpn/update-resolv-conf file to /etc/openvpn/update-resolv-conf.bkp and run protonvpn-cli. The tool will detect the file is lacking and prompt you to download it. Maybe the new version of /etc/openvpn/update-resolv-conf can solve the problem. It's just a bet.

[xilopaint]

Hey @6lackHeart, do you want to try solving the issue with your DNS management or are you fine with the workaround?

[6lackHeart]

@xilopaint sorry for the late reply. I'm fine with the work around, but if you think we can fix it then, I would be game to try and figure it out. Should I try to rename my /etc/openvpn/update-resolv-conf to a backup file format?

[xilopaint]

Should I try to rename my /etc/openvpn/update-resolv-conf to a backup file format?

Before doing it, could you check the version of your openvpn package with openvpn --version?

[6lackHeart]

This is the output I get for openvpn --version

OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Originally developed by James Yonan Copyright (C) 2002-2010 OpenVPN Technologies, Inc. sales@openvpn.net Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_maintainer_mode=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_plugindir='${prefix}/lib/openvpn' with_sysroot=no

[xilopaint]

Your openvpn package is outdated. To upgrade all packages in your machine, including openvpn, use:

$ sudo apt-get update && sudo apt-get upgrade

When it has finished, you can check the version again with openvpn --version.

[6lackHeart]

That's usually how I upgrade my system. I'll try it again right now, but I have a feeling it may be the same. I have my system set up to use a update mirror from my local university. Could that be causing the issue?

[6lackHeart]

Here is the output for openvpn --version after I used sudo apt-get update && sudo apt-get upgrade

OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Originally developed by James Yonan Copyright (C) 2002-2010 OpenVPN Technologies, Inc. sales@openvpn.net Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_maintainer_mode=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_plugindir='${prefix}/lib/openvpn' with_sysroot=no

[xilopaint]

What's your output for which resolvconf?

[6lackHeart]

My output for which resolvconf

/sbin/resolvconf

[xilopaint]

I have my system set up to use a update mirror from my local university. Could that be causing the issue?

Could you try to use any official mirror for Ubuntu?

[6lackHeart]

I changed the mirror, and it says its all up to date, but the version is the same. What is the most up to date version of openvpn?

[6lackHeart]

I'm seeing other people were having trouble updating openvpn with Ubuntu 16

[xilopaint]

What's your output for echo $PATH?

[6lackHeart]

This is my output for echo $PATH

/home/b/bin:/home/b/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin

[xilopaint]

What's the output for ps ax | grep dns?

[6lackHeart]

Output for ps ax | grep dns

1782 ? S 0:14 /usr/sbin/dnsmasq --no-resolv --keep-in-foreground --no-hosts --bind-interfaces --pid-file=/var/run/NetworkManager/dnsmasq.pid --listen-address=127.0.1.1 --cache-size=0 --conf-file=/dev/null --proxy-dnssec --enable-dbus=org.freedesktop.NetworkManager.dnsmasq --conf-dir=/etc/NetworkManager/dnsmasq.d 3872 ? Sl 0:00 /usr/lib/gvfs/gvfsd-dnssd --spawner :1.3 /org/gtk/gvfs/exec_spaw/5

[xilopaint]

It seems you have a DNS resolver (dnsmask) that might be causing the issue. Let's try to stop it and see what happens.

If you are connected to OpenVPN now, disconnect it and get back to your normal connection, restoring /etc/resolv.conf to its normal state.

After that, stop dnsmask by entering sudo systemctl stop dnsmasq.service and try to connect and disconnect to OpenVPN to check if DNS management is working.

[6lackHeart]

Output for sudo systemctl stop dnsmasq.service

Failed to stop dnsmasq.service: Unit dnsmasq.service not loaded.

[xilopaint]

Try sudo killall dnsmasq, restore /etc/resolv.conf and connect and disconnect to OpenVPN. If it works we can disable dnsmask later.

[6lackHeart]

Try connecting the regular way sudo pvpn --connect or manually?

[xilopaint]

Try to connect and disconnect manually to OpenVPN, not protonvpn-cli.

[6lackHeart]

I tried both. sudo pvpn --connect output was "error connecting to VPN" and connecting manually completed the initilization sequence, but I can't connect to the web, and I get "server not found"

[xilopaint]

Can you check if your network connection is set to something like "Automatic (DHCP) addresses only"?

Also, tell me if your output of cat /etc/resolv.conf still shows nameserver 127.0.0.1.

[6lackHeart]

It says I have DHCP enabled for IPv4 and IPv6. I don't see anything about automatic DHCP. I do see reserved DHCP addresses. When I run cat /etc/resolv.conf it still shows 127.0.01. Do you want me to check that when I'm trying to connect or connected with the work around?

[xilopaint]

Ok, so let's try disabling dnsmask. At first, check if you have a /etc/NetworkManager/NetworkManager.conf file. If so, follow these steps:

1) sudo gedit /etc/NetworkManager/NetworkManager.conf 2) Comment out the dns=dnsmasq line by putting a hash # in front it. 3) sudo service network-manager restart

After that, try connecting and disconnecting manually to OpenVPN and see what happens.

[xilopaint]

When I run cat /etc/resolv.conf it still shows 127.0.01. Do you want me to check that when I'm trying to connect or connected with the work around?

I asked you to try that connected with your regular connection.

[6lackHeart]

Okay I commented out dns=masq and got the network manager to restart.

[xilopaint]

Do you still have nameserver 127.0.0.1 on cat /etc/resolv.conf or it already changed to your actual DNS?

[6lackHeart]

Now when I run cat /etc/resolv.conf I get these as the output

Generated by resolvconf search **.rr.com nameserver nameserver nameserver

[xilopaint]

Ok, you can hide the address for your privacy. Now try to connect and disconnect manually to OpenVPN and see if it works.

[6lackHeart]

I'm sorry disregard that last comment. I forgot that it does that sometimes when I connect manually, and I just have to try it again to get a completed ininitiation sequence. Its working, but its not working. When I go to Ipleak I can still see my ip location and everything, but I am connected to openvpn.

[xilopaint]

What's the output for cat /etc/resolv.conf while connected manually?

[xilopaint]

Okay I commented out dns=masq and got the network manager to restart.

Is this a typo? The correct line is dns=dnsmasq.

[6lackHeart]

I apologize, I was multitasking, but I'm not anymore. It was a typo.

I am connected manually, and the output for cat /etc/resolv.conf

Generated by resolvconf search **.rr.com nameserver 10.8.8.1 nameserver nameserver nameserver

same as before, but the proton dns is added to the top of the stack.

[xilopaint]

We are pretty close. Does ProtonVPN DNS disappear after you disconnect from OpenVPN?

[6lackHeart]

It does, but something is wrong with my computers connection now. I'm on my phone so I can make this comment.

[xilopaint]

Please, disconnect from OpenVPN, restart your machine and try to connect again. Tell me if it works.

[6lackHeart]

Okay its working now, sorry that was weird.

Before I lost connection, the cat /etc/resolv.conf output was back to nameserver 127.0.0.1