ProtonVPN / protonvpn-cli

Legacy protonvpn-cli: ProtonVPN Command-Line Tool for Linux and macOS. This has been superseded by https://github.com/ProtonVPN/protonvpn-cli-ng
Other
607 stars 95 forks source link

Two flavors of ipv6 error #77

Closed acwhite3 closed 6 years ago

acwhite3 commented 6 years ago

I've been using protonvpn on Linux Ubuntu 16.04 LTS successfully for sometime now including yesterday. After reboot today I am receiving the following two flavors of ipv6 error messages and am unable to connect:

[!] Error connecting to VPN. [!] There are issues in managing ipv6 in the system. Please test the system for the root cause. Not able to manage ipv6 by protonvpn-cli might cause issues in leaking the system’s ipv6 address.

And

Failed to query password: Timer expired Connecting... [!] Error connecting to VPN. [!] This is an error in enabling ipv6 on the machine. Please enable it manually.

Updated sysctl to reenable ipv6 but that doesn't solve the problem just returns a generic can't connect message.

acwhite3 commented 6 years ago

Even here where it successfully asked for my machine password it still reports a password time out:

sudo protonvpn-cli -fastest-connect [sudo] password for xxxxxxxx: Fetching ProtonVPN Servers... Failed to query password: Timer expired Connecting... [!] Error connecting to VPN. [!] This is an error in enabling ipv6 on the machine. Please enable it manually.

xilopaint commented 6 years ago

Have you updated protonvpn-cli since yesterday? If so, it was before or after you start to face the issue?

acwhite3 commented 6 years ago

The problem occurred first. One of the actions I took subsequently was to issue the update command. The problem has continued to occur.

Sent from ProtonMail, encrypted email based in Switzerland.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On April 5, 2018 11:49 AM, Arthur Pinheiro notifications@github.com wrote:

Have you updated protonvpn-cli since yesterday? If so, it was before or after you start to face the issue?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

xilopaint commented 6 years ago

Do you have a free tier or paid tier plan? This should be a temporary problem on the API/backend side.

acwhite3 commented 6 years ago

I have the paid plus plan.

Sent from ProtonMail, encrypted email based in Switzerland.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On April 5, 2018 12:19 PM, Arthur Pinheiro notifications@github.com wrote:

Do you have a free tier or paid tier plan? This should be a temporary problem on the API/backend side.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

acwhite3 commented 6 years ago

Ok, so based on your last comment I did a re-install and re-init and now it is working. Still unclear what caused it to stop working. Any ideas on that?

acwhite3 commented 6 years ago

However, in disconnecting just now I received the following error again:

sudo protonvpn-cli -disconnect [sudo] password for xxxxxxxx: Disconnecting... [!] This is an error in enabling ipv6 on the machine. Please enable it manually. [#] Disconnected.

pwlodarczak commented 6 years ago

I have the same issue when trying to connect using the protonvpn-cli client on Ubuntu 17.10:

Connecting... [!] Error connecting to VPN. [!] There are issues in managing IPv6 in the system. Please test the system for the root cause. Not being able to manage IPv6 by protonvpn-cli might cause issues in leaking the system's IPv6 address.

I downloaded yesterdays protonvpn-cli Peter

xilopaint commented 6 years ago

Ok, so based on your last comment I did a re-install and re-init and now it is working. Still unclear what caused it to stop working. Any ideas on that?

It might be #73.

xilopaint commented 6 years ago

I have the same issue when trying to connect using the protonvpn-cli client on Ubuntu 17.10:

@pwlodarczak could you try the code in #80 and tell us if it fixes your problem?

ghost commented 6 years ago

facing the same thing.

if u run (choosing any server the same thing)

sudo protonvpn-cli -c

it will give

[!] Error connecting to VPN.
[!] There are issues in managing ipv6 in the system. Please test the system for the root cause.
 Not able to manage ipv6 by protonvpn-cli might cause issues in leaking the system’s ipv6 address.

and if u follow the instructions for disabling ipv6 from protonvpn website here

and run again

sudo protonvpn-cli -c

it will give:-

Connecting...
[!] Error connecting to VPN.
[!] This is an error in enabling ipv6 on the machine. Please enable it manually.

and im running protonvpn plus service.

(btw ur service sucks if u test ur instructions on ubuntu , please use debian for better privacy respect)

xilopaint commented 6 years ago

@oonimooni could you try sudo pvpn -c ES#1 and tell me if it works for you?

ghost commented 6 years ago
user@user:~$ sudo pvpn -c ES#1
Fetching ProtonVPN Servers...
Connecting...
[!] Error connecting to VPN.
[!] This is an error in enabling ipv6 on the machine. Please enable it manually.
user@usert:~$ 
ghost commented 6 years ago

why the fuck would i allow IPv6 to my machine?

alancwoo commented 6 years ago

I'm having the same issue on Ubuntu 16.04 and the latest version of the cli at the time of this posting, also receiving the error:

sudo protonvpn-cli --update

[!] Error connecting to VPN. [!] There are issues in managing IPv6 in the system. Please test the system for the root cause. Not being able to manage IPv6 by protonvpn-cli might cause issues in leaking the system's IPv6 address.

njfox commented 6 years ago

I tried on a fresh Ubuntu 16.04 machine and wasn't able to reproduce this. The only way I was able to cause any IPv6 errors was to manually corrupt the ~/.protonvpn-cli/.ipv6_address file while connected to the VPN, but the client seemed to recover gracefully after that.

To anyone having ipv6 errors, do they come back if you uninstall, delete ~/.protonvpn-cli if it still exists, reboot, and reinstall/re-init?

xilopaint commented 6 years ago

@njfox I don't see how, but do you think this change on this line could be the problem?

https://github.com/ProtonVPN/protonvpn-cli/commit/2664301afacc3efbac75ef607d19d4cb2ee2caf9#diff-d7977de715d6ce57a383051ab9401f29R74

njfox commented 6 years ago

Doesn't look like it to me, the file still gets created at the correct path in ~/.protonvpn-cli/. I'm guessing the machine got rebooted or lost connectivity while connected to the VPN or something, causing a bad state with regard to the CLI client and IPv6 settings on the machine. I'm thinking rebooting to reset the IPv6 state on the machine and clearing out ~/.protonvpn-cli/.ipv6* might fix it but I really have no idea since I can't reproduce it.

xilopaint commented 6 years ago

why the fuck would i allow IPv6 to my machine?

@oonimooni, the message implies it was previously enabled and for whatever reason couldn't be reactivated automatically after the frustrated attempt of connection. Isn't it true?

Btw, a good bet was suggested by @njfox:

To anyone having ipv6 errors, do they come back if you uninstall, delete ~/.protonvpn-cli if it still exists, reboot, and reinstall/re-init?

borra commented 6 years ago

Even after an uninstall/restart/install the errors are the same. Tried once with IPv6 disabled (4 lines added to /etc/sysctl.conf) and once with IPv6 enabled. Same result. Running on Debian 8.x. $ cat /etc/debian_version 8.10

Thanks,

xilopaint commented 6 years ago

@borra did you check if ~/.protonvpn-cli was removed before reinstalling and trying again?

ghost commented 6 years ago

@oonimooni, the message implies it was previously enabled and for whatever reason couldn't be reactivated automatically after the frustrated attempt of connection. Isn't it true?

hope so

did you check if ~/.protonvpn-cli was removed before reinstalling and trying again?

i did it , nothing changed same issue.

Please test ur tests on Debian NOT Ubuntu. u r hurting our privacy views to proton project if u use ubuntu as an OS which respect privacy to test privacy tools inside it. (which in reality is the absolute opposite) .

My testing environment on non-gui debian 9.

njfox commented 6 years ago

@oonimooni, can you reboot and paste the output of the following commands? Please redact your IPv6 addresses if any show up:

$ sudo ls -al ~/.protonvpn-cli
$ ip -6 a
ghost commented 6 years ago

$ sudo ls -al ~/.protonvpn-cli $ ip -6 a

user@user:~$ sudo ls -al ~/.protonvpn-cli
total 16
dr--------  2 root root 4096 Apr 10 20:19 .
drwx------ 18 user user 4096 Apr 10 20:01 ..
-r--------  1 root root   50 Apr 10 20:17 protonvpn_openvpn_credentials
-r--------  1 root root    2 Apr 10 20:18 protonvpn_tier
user@user:~$ sudo ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fe80::216:3eff:fe5e:6c00/64 scope link 
       valid_lft forever preferred_lft forever
user@user:~$ 
xilopaint commented 6 years ago

Please test on Debian NOT Ubuntu.

I tested on Debian 9.2 in a Virtual Machine with no issues. Also tested on Raspbian (Debian Stretch based).

ghost commented 6 years ago

I tested on Debian 9.2 in a Virtual Machine with no issues. Also tested on Raspbian (Debian Stretch based).

how u r installing protonvpn-cli ?

xilopaint commented 6 years ago

how u r installing protonvpn-cli ?

sudo ./protonvpn-cli.sh --install

ghost commented 6 years ago

found some hope:

when i try to connect to Tor Node = it says connected

others not the same thing. and i think the problem is that with the VPN servers settings needs not to request IPv6 from the Client (which i think thats how the case is)

njfox commented 6 years ago

Thanks for the update @oonimooni. Unfortunately I’m stumped on this one, but maybe @mazen160 will have some ideas.

Let us know if you’re able to figure anything else out.

mazen160 commented 6 years ago

Hi all,

The way to debug this first is to remove the /dev/null redirection of errors in protonvpn-cli on your code. Then based on that, we can figure out the root causes of the issues.

Please post the output here.

mazen160 commented 6 years ago

Hi all,

I have reviewed the code on https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L205

It should rewrite the ipv6 config on every connect.

what to do? 1) Uninstall protonvpn and reinstall it. 2) initialize a clean profile.

If you're still facing errors: then do 1) Remove &> /dev/null from manage_ipv6() function. 2) Keep testing the issue, and note all errors. then post it on the issue ticket.

There was a change on this area that might caused issues for users with older version.

ghost commented 6 years ago

Remove &> /dev/null from manage_ipv6() function.

sorry where does that located?

mazen160 commented 6 years ago

@oonimooni After downloading the protonvpn-cli.sh file, open it in a text-editor and search for manage_ipv6() You will find the &> /dev/null mentioned multiple times, remove this part, and then re-run the script without installing for testing.

Rafficer commented 6 years ago

https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L208

https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L211

https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L243

https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L246

https://github.com/ProtonVPN/protonvpn-cli/blob/master/protonvpn-cli.sh#L251

Or without clicking, at the end of line 208, 211, 243, 246 and 251

ghost commented 6 years ago

After downloading the protonvpn-cli.sh file, open it in a text-editor and search for manage_ipv6() You will find the &> /dev/null mentioned multiple times, remove this part, and then re-run the script without installing for testing.

same message as:

Connecting... [!] Error connecting to VPN. [!] This is an error in enabling ipv6 on the machine. Please enable it manually.

borra commented 6 years ago

Hello,

Tried the above advice. Still the same error on a Debian 8.10. Removed all the /dev/null redirection and below is the error, now with more output. Hope this helps... net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Connecting... [!] Error connecting to VPN. net.ipv6.conf.all.disable_ipv6 = 0 net.ipv6.conf.default.disable_ipv6 = 0 Error: an inet address is expected rather than "dev". [!] There are issues in managing IPv6 in the system. Please test the system for the root cause. Not being able to manage IPv6 by protonvpn-cli might cause issues in leaking the system's IPv6 address.

Cheers.

borra commented 6 years ago

Here is my "ip -6" output: ~/protonvpn-cli$ sudo ip -6 a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 inet6 ::1/128 scope host valid_lft forever preferred_lft forever 3: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qlen 1000 inet6 fe80::721a:4ff:fefa:e985/64 scope link valid_lft forever preferred_lft forever

alancwoo commented 6 years ago

I also just reinstalled, and removed the error redirects and still having the same issue (Ubuntu 16.04)

net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 Connecting... [!] Error connecting to VPN. net.ipv6.conf.all.disable_ipv6 = 0 net.ipv6.conf.default.disable_ipv6 = 0 Error: ??? address is expected rather than "dev". Error: ??? address is expected rather than "dev". [!] There are issues in managing IPv6 in the system. Please test the system for the root cause. Not being able to manage IPv6 by protonvpn-cli might cause issues in leaking the system's IPv6 address.

ip -6 a output:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000 inet6 ::1/128 scope host valid_lft forever preferred_lft forever 4: vmnet1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UNKNOWN qlen 1000 inet6 fe80::250:56ff:fec0:1/64 scope link valid_lft forever preferred_lft forever 5: vmnet8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UNKNOWN qlen 1000 inet6 fe80::250:56ff:fec0:8/64 scope link valid_lft forever preferred_lft forever

ghost commented 6 years ago

new logs/debug after updating protonvpn-cli:- (this is when im trying to connect to "secure core" service"

@mazen160 @Rafficer @xilopaint

Connecting...
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/json/__init__.py", line 339, in loads
    return _default_decoder.decode(s)
  File "/usr/lib/python2.7/json/decoder.py", line 364, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
    raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded
[!] Error connecting to VPN.
[!] This is an error in enabling ipv6 on the machine. Please enable it manually.
xilopaint commented 6 years ago

@oonimooni this error was reported in #90 and @mazen160 is already aware of it. A fix should be pushed soon. As a workaround you can revert the change made by the last commit.

mazen160 commented 6 years ago

@oonimooni The ip-checking bug was fixed now :)

ghost commented 6 years ago

The ip-checking bug was fixed now :)

@mazen160 not sure how, it still produces the same error of this ticket with no hope to successfully connecting.

xilopaint commented 6 years ago

@mazen160 not sure how, it still produces the same error of this ticket with no hope to successfully connecting.

You shouldn't be seeing any error. The new code redirects stderr to /dev/null.

Please, make sure protonvpn-cli is updated in your machine by running sudo pvpn -update.

rosenpin commented 6 years ago

❯ sudo pvpn --update [#] Checking for update. [*] protonvpn-cli is up-to-date!

❯ sudo pvpn -c [picked the first option] Connecting... [!] Error connecting to VPN.

Seems like it's the same error but the message was removed. Is there a solution or some workaround for this issue yet?

xilopaint commented 6 years ago

Seems like it's the same error but the message was removed. Is there a solution or some workaround for this issue yet?

What's your connection speed? Could you try to run protonvpn-cli in another network?

mazen160 commented 6 years ago

@rosenpin If you do

❯ sudo pvpn --update
[#] Checking for update.
[*] protonvpn-cli is up-to-date!

and it worked, then it's not related to ip checking. Also since you connected without ipv6 errors, then it's not related to ipv6 ticket.

Please make a new ticket, with the follownig:

$ PROTONVPN_CLI_LOG=true pvpn -c

and attach the log file in the ticket.

mazen160 commented 6 years ago

@oonimooni

How? The parsing should not be related. Can you debug the issue more, or send us more info?

ghost commented 6 years ago

How? The parsing should not be related. Can you debug the issue more, or send us more info?

[*] CLI logging mode enabled.
[*] Saving logs to: /tmp/protonvpn-cli-logs-Mg8cWRYt
Connecting...
[!] Error connecting to VPN.
[!] This is an error in enabling ipv6 on the machine. Please enable it manually.
Fri Apr 20 19:29:19 2018 us=222330 Current Parameter Settings:
Fri Apr 20 19:29:19 2018 us=222458   config = '/dev/stdin'
Fri Apr 20 19:29:19 2018 us=222495   mode = 0
Fri Apr 20 19:29:19 2018 us=222522   persist_config = DISABLED
Fri Apr 20 19:29:19 2018 us=222550   persist_mode = 1
Fri Apr 20 19:29:19 2018 us=222577   show_ciphers = DISABLED
Fri Apr 20 19:29:19 2018 us=222601   show_digests = DISABLED
Fri Apr 20 19:29:19 2018 us=222626   show_engines = DISABLED
Fri Apr 20 19:29:19 2018 us=222651   genkey = DISABLED
Fri Apr 20 19:29:19 2018 us=222676   key_pass_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=222701   show_tls_ciphers = DISABLED
Fri Apr 20 19:29:19 2018 us=222727   connect_retry_max = 0
Fri Apr 20 19:29:19 2018 us=222752 Connection profiles [0]:
Fri Apr 20 19:29:19 2018 us=222780   proto = udp
Fri Apr 20 19:29:19 2018 us=222805   local = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=222832   local_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=222950   remote = '185.159.158.106'
Fri Apr 20 19:29:19 2018 us=222982   remote_port = '1194'
Fri Apr 20 19:29:19 2018 us=222999   remote_float = DISABLED
Fri Apr 20 19:29:19 2018 us=223016   bind_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=223033   bind_local = DISABLED
Fri Apr 20 19:29:19 2018 us=223049   bind_ipv6_only = DISABLED
Fri Apr 20 19:29:19 2018 us=223065   connect_retry_seconds = 5
Fri Apr 20 19:29:19 2018 us=223082   connect_timeout = 20
Fri Apr 20 19:29:19 2018 us=223098   socks_proxy_server = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223114   socks_proxy_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223138   tun_mtu = 1500
Fri Apr 20 19:29:19 2018 us=223165   tun_mtu_defined = ENABLED
Fri Apr 20 19:29:19 2018 us=223191   link_mtu = 1500
Fri Apr 20 19:29:19 2018 us=223216   link_mtu_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=223243   tun_mtu_extra = 32
Fri Apr 20 19:29:19 2018 us=223269   tun_mtu_extra_defined = ENABLED
Fri Apr 20 19:29:19 2018 us=223296   mtu_discover_type = -1
Fri Apr 20 19:29:19 2018 us=223323   fragment = 0
Fri Apr 20 19:29:19 2018 us=223349   mssfix = 1450
Fri Apr 20 19:29:19 2018 us=223375   explicit_exit_notification = 0
Fri Apr 20 19:29:19 2018 us=223401 Connection profiles [1]:
Fri Apr 20 19:29:19 2018 us=223428   proto = udp
Fri Apr 20 19:29:19 2018 us=223453   local = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223478   local_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223505   remote = '185.159.158.56'
Fri Apr 20 19:29:19 2018 us=223531   remote_port = '1194'
Fri Apr 20 19:29:19 2018 us=223556   remote_float = DISABLED
Fri Apr 20 19:29:19 2018 us=223582   bind_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=223608   bind_local = DISABLED
Fri Apr 20 19:29:19 2018 us=223633   bind_ipv6_only = DISABLED
Fri Apr 20 19:29:19 2018 us=223657   connect_retry_seconds = 5
Fri Apr 20 19:29:19 2018 us=223674   connect_timeout = 20
Fri Apr 20 19:29:19 2018 us=223690   socks_proxy_server = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223705   socks_proxy_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=223721   tun_mtu = 1500
Fri Apr 20 19:29:19 2018 us=223737   tun_mtu_defined = ENABLED
Fri Apr 20 19:29:19 2018 us=223753   link_mtu = 1500
Fri Apr 20 19:29:19 2018 us=223769   link_mtu_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=223792   tun_mtu_extra = 32
Fri Apr 20 19:29:19 2018 us=223817   tun_mtu_extra_defined = ENABLED
Fri Apr 20 19:29:19 2018 us=223843   mtu_discover_type = -1
Fri Apr 20 19:29:19 2018 us=223954   fragment = 0
Fri Apr 20 19:29:19 2018 us=223987   mssfix = 1450
Fri Apr 20 19:29:19 2018 us=224015   explicit_exit_notification = 0
Fri Apr 20 19:29:19 2018 us=224041 Connection profiles END
Fri Apr 20 19:29:19 2018 us=224067   remote_random = ENABLED
Fri Apr 20 19:29:19 2018 us=224093   ipchange = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224119   dev = 'tun'
Fri Apr 20 19:29:19 2018 us=224144   dev_type = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224169   dev_node = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224195   lladdr = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224221   topology = 1
Fri Apr 20 19:29:19 2018 us=224248   ifconfig_local = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224275   ifconfig_remote_netmask = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224319   ifconfig_noexec = DISABLED
Fri Apr 20 19:29:19 2018 us=224337   ifconfig_nowarn = DISABLED
Fri Apr 20 19:29:19 2018 us=224353   ifconfig_ipv6_local = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224369   ifconfig_ipv6_netbits = 0
Fri Apr 20 19:29:19 2018 us=224385   ifconfig_ipv6_remote = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224401   shaper = 0
Fri Apr 20 19:29:19 2018 us=224417   mtu_test = 0
Fri Apr 20 19:29:19 2018 us=224433   mlock = DISABLED
Fri Apr 20 19:29:19 2018 us=224449   keepalive_ping = 0
Fri Apr 20 19:29:19 2018 us=224465   keepalive_timeout = 0
Fri Apr 20 19:29:19 2018 us=224481   inactivity_timeout = 0
Fri Apr 20 19:29:19 2018 us=224497   ping_send_timeout = 15
Fri Apr 20 19:29:19 2018 us=224513   ping_rec_timeout = 0
Fri Apr 20 19:29:19 2018 us=224529   ping_rec_timeout_action = 2
Fri Apr 20 19:29:19 2018 us=224545   ping_timer_remote = ENABLED
Fri Apr 20 19:29:19 2018 us=224561   remap_sigusr1 = 0
Fri Apr 20 19:29:19 2018 us=224577   persist_tun = ENABLED
Fri Apr 20 19:29:19 2018 us=224592   persist_local_ip = DISABLED
Fri Apr 20 19:29:19 2018 us=224608   persist_remote_ip = DISABLED
Fri Apr 20 19:29:19 2018 us=224640   persist_key = ENABLED
Fri Apr 20 19:29:19 2018 us=224656   passtos = DISABLED
Fri Apr 20 19:29:19 2018 us=224671   resolve_retry_seconds = 1000000000
Fri Apr 20 19:29:19 2018 us=224687   resolve_in_advance = DISABLED
Fri Apr 20 19:29:19 2018 us=224703   username = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224733   groupname = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224749   chroot_dir = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224765   cd_dir = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224781   writepid = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=224797   up_script = '/etc/openvpn/update-resolv-conf'
Fri Apr 20 19:29:19 2018 us=224813   down_script = '/etc/openvpn/update-resolv-conf'
Fri Apr 20 19:29:19 2018 us=224830   down_pre = DISABLED
Fri Apr 20 19:29:19 2018 us=224846   up_restart = DISABLED
Fri Apr 20 19:29:19 2018 us=224931   up_delay = DISABLED
Fri Apr 20 19:29:19 2018 us=224950   daemon = ENABLED
Fri Apr 20 19:29:19 2018 us=224967   inetd = 0
Fri Apr 20 19:29:19 2018 us=224984   log = ENABLED
Fri Apr 20 19:29:19 2018 us=225000   suppress_timestamps = DISABLED
Fri Apr 20 19:29:19 2018 us=225016   machine_readable_output = DISABLED
Fri Apr 20 19:29:19 2018 us=225033   nice = 0
Fri Apr 20 19:29:19 2018 us=225049   verbosity = 4
Fri Apr 20 19:29:19 2018 us=225066   mute = 0
Fri Apr 20 19:29:19 2018 us=225082   gremlin = 0
Fri Apr 20 19:29:19 2018 us=225099   status_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225116   status_file_version = 1
Fri Apr 20 19:29:19 2018 us=225132   status_file_update_freq = 60
Fri Apr 20 19:29:19 2018 us=225149   occ = ENABLED
Fri Apr 20 19:29:19 2018 us=225166   rcvbuf = 0
Fri Apr 20 19:29:19 2018 us=225182   sndbuf = 0
Fri Apr 20 19:29:19 2018 us=225199   mark = 0
Fri Apr 20 19:29:19 2018 us=225215   sockflags = 0
Fri Apr 20 19:29:19 2018 us=225232   fast_io = ENABLED
Fri Apr 20 19:29:19 2018 us=225249   comp.alg = 2
Fri Apr 20 19:29:19 2018 us=225266   comp.flags = 1
Fri Apr 20 19:29:19 2018 us=225283   route_script = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225299   route_default_gateway = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225316   route_default_metric = 0
Fri Apr 20 19:29:19 2018 us=225332   route_noexec = DISABLED
Fri Apr 20 19:29:19 2018 us=225349   route_delay = 0
Fri Apr 20 19:29:19 2018 us=225365   route_delay_window = 30
Fri Apr 20 19:29:19 2018 us=225382   route_delay_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=225413   route_nopull = DISABLED
Fri Apr 20 19:29:19 2018 us=225429   route_gateway_via_dhcp = DISABLED
Fri Apr 20 19:29:19 2018 us=225461   allow_pull_fqdn = DISABLED
Fri Apr 20 19:29:19 2018 us=225478   management_addr = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225495   management_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225511   management_user_pass = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225527   management_log_history_cache = 250
Fri Apr 20 19:29:19 2018 us=225544   management_echo_buffer_size = 100
Fri Apr 20 19:29:19 2018 us=225571   management_write_peer_info_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225588   management_client_user = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225604   management_client_group = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225620   management_flags = 0
Fri Apr 20 19:29:19 2018 us=225637   shared_secret_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225653   key_direction = 2
Fri Apr 20 19:29:19 2018 us=225670   ciphername = 'AES-256-CBC'
Fri Apr 20 19:29:19 2018 us=225686   ncp_enabled = ENABLED
Fri Apr 20 19:29:19 2018 us=225703   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Apr 20 19:29:19 2018 us=225719   authname = 'SHA512'
Fri Apr 20 19:29:19 2018 us=225736   prng_hash = 'SHA1'
Fri Apr 20 19:29:19 2018 us=225752   prng_nonce_secret_len = 16
Fri Apr 20 19:29:19 2018 us=225768   keysize = 0
Fri Apr 20 19:29:19 2018 us=225785   engine = DISABLED
Fri Apr 20 19:29:19 2018 us=225801   replay = ENABLED
Fri Apr 20 19:29:19 2018 us=225817   mute_replay_warnings = DISABLED
Fri Apr 20 19:29:19 2018 us=225834   replay_window = 64
Fri Apr 20 19:29:19 2018 us=225880   replay_time = 15
Fri Apr 20 19:29:19 2018 us=225904   packet_id_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=225920   use_iv = ENABLED
Fri Apr 20 19:29:19 2018 us=225936   test_crypto = DISABLED
Fri Apr 20 19:29:19 2018 us=225953   tls_server = DISABLED
Fri Apr 20 19:29:19 2018 us=225969   tls_client = ENABLED
Fri Apr 20 19:29:19 2018 us=225985   key_method = 2
Fri Apr 20 19:29:19 2018 us=226002   ca_file = '[[INLINE]]'
Fri Apr 20 19:29:19 2018 us=226018   ca_path = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226034   dh_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226050   cert_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226067   extra_certs_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226084   priv_key_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226100   pkcs12_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226117   cipher_list = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226133   tls_verify = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226149   tls_export_cert = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226165   verify_x509_type = 0
Fri Apr 20 19:29:19 2018 us=226181   verify_x509_name = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226197   crl_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226213   ns_cert_type = 0
Fri Apr 20 19:29:19 2018 us=226229   remote_cert_ku[i] = 160
Fri Apr 20 19:29:19 2018 us=226246   remote_cert_ku[i] = 136
Fri Apr 20 19:29:19 2018 us=226262   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226278   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226294   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226310   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226326   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226342   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226358   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226374   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226390   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226406   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226422   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226438   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226454   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226469   remote_cert_ku[i] = 0
Fri Apr 20 19:29:19 2018 us=226486   remote_cert_eku = 'TLS Web Server Authentication'
Fri Apr 20 19:29:19 2018 us=226503   ssl_flags = 0
Fri Apr 20 19:29:19 2018 us=226519   tls_timeout = 2
Fri Apr 20 19:29:19 2018 us=226536   renegotiate_bytes = -1
Fri Apr 20 19:29:19 2018 us=226552   renegotiate_packets = 0
Fri Apr 20 19:29:19 2018 us=226568   renegotiate_seconds = 0
Fri Apr 20 19:29:19 2018 us=226584   handshake_window = 60
Fri Apr 20 19:29:19 2018 us=226601   transition_window = 3600
Fri Apr 20 19:29:19 2018 us=226618   single_session = DISABLED
Fri Apr 20 19:29:19 2018 us=226634   push_peer_info = DISABLED
Fri Apr 20 19:29:19 2018 us=226651   tls_exit = DISABLED
Fri Apr 20 19:29:19 2018 us=226667   tls_auth_file = '[[INLINE]]'
Fri Apr 20 19:29:19 2018 us=226683   tls_crypt_file = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=226708   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226725   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226750   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226767   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226784   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226800   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226816   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226833   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226849   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226901   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226917   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226934   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226950   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226966   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226982   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=226998   pkcs11_protected_authentication = DISABLED
Fri Apr 20 19:29:19 2018 us=227016   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227033   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227049   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227065   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227082   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227098   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227114   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227130   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227147   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227163   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227179   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227195   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227211   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227227   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227243   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227260   pkcs11_private_mode = 00000000
Fri Apr 20 19:29:19 2018 us=227276   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227292   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227308   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227324   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227340   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227356   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227372   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227388   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227405   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227421   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227437   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227453   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227469   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227485   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227501   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227517   pkcs11_cert_private = DISABLED
Fri Apr 20 19:29:19 2018 us=227533   pkcs11_pin_cache_period = -1
Fri Apr 20 19:29:19 2018 us=227549   pkcs11_id = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=227566   pkcs11_id_management = DISABLED
Fri Apr 20 19:29:19 2018 us=227585   server_network = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227604   server_netmask = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227632   server_network_ipv6 = ::
Fri Apr 20 19:29:19 2018 us=227649   server_netbits_ipv6 = 0
Fri Apr 20 19:29:19 2018 us=227667   server_bridge_ip = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227685   server_bridge_netmask = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227702   server_bridge_pool_start = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227728   server_bridge_pool_end = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227745   ifconfig_pool_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=227763   ifconfig_pool_start = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227781   ifconfig_pool_end = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227798   ifconfig_pool_netmask = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=227815   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=227831   ifconfig_pool_persist_refresh_freq = 600
Fri Apr 20 19:29:19 2018 us=227848   ifconfig_ipv6_pool_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=227904   ifconfig_ipv6_pool_base = ::
Fri Apr 20 19:29:19 2018 us=227923   ifconfig_ipv6_pool_netbits = 0
Fri Apr 20 19:29:19 2018 us=227941   n_bcast_buf = 256
Fri Apr 20 19:29:19 2018 us=227958   tcp_queue_limit = 64
Fri Apr 20 19:29:19 2018 us=227975   real_hash_size = 256
Fri Apr 20 19:29:19 2018 us=227992   virtual_hash_size = 256
Fri Apr 20 19:29:19 2018 us=228008   client_connect_script = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228032   learn_address_script = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228049   client_disconnect_script = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228065   client_config_dir = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228082   ccd_exclusive = DISABLED
Fri Apr 20 19:29:19 2018 us=228099   tmp_dir = '/tmp'
Fri Apr 20 19:29:19 2018 us=228115   push_ifconfig_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=228134   push_ifconfig_local = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=228152   push_ifconfig_remote_netmask = 0.0.0.0
Fri Apr 20 19:29:19 2018 us=228169   push_ifconfig_ipv6_defined = DISABLED
Fri Apr 20 19:29:19 2018 us=228188   push_ifconfig_ipv6_local = ::/0
Fri Apr 20 19:29:19 2018 us=228205   push_ifconfig_ipv6_remote = ::
Fri Apr 20 19:29:19 2018 us=228222   enable_c2c = DISABLED
Fri Apr 20 19:29:19 2018 us=228238   duplicate_cn = DISABLED
Fri Apr 20 19:29:19 2018 us=228255   cf_max = 0
Fri Apr 20 19:29:19 2018 us=228271   cf_per = 0
Fri Apr 20 19:29:19 2018 us=228288   max_clients = 1024
Fri Apr 20 19:29:19 2018 us=228304   max_routes_per_client = 256
Fri Apr 20 19:29:19 2018 us=228321   auth_user_pass_verify_script = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228337   auth_user_pass_verify_script_via_file = DISABLED
Fri Apr 20 19:29:19 2018 us=228353   auth_token_generate = DISABLED
Fri Apr 20 19:29:19 2018 us=228370   auth_token_lifetime = 0
Fri Apr 20 19:29:19 2018 us=228386   port_share_host = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228402   port_share_port = '[UNDEF]'
Fri Apr 20 19:29:19 2018 us=228418   client = ENABLED
Fri Apr 20 19:29:19 2018 us=228434   pull = ENABLED
Fri Apr 20 19:29:19 2018 us=228452   auth_user_pass_file = '/home/user/.protonvpn-cli/protonvpn_openvpn_credentials'
Fri Apr 20 19:29:19 2018 us=228472 OpenVPN 2.4.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
Fri Apr 20 19:29:19 2018 us=228499 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.08
Fri Apr 20 19:29:19 2018 us=229482 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Fri Apr 20 19:29:19 2018 us=229504 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Apr 20 19:29:19 2018 us=229834 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Apr 20 19:29:19 2018 us=229847 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Apr 20 19:29:19 2018 us=229868 LZO compression initializing
Fri Apr 20 19:29:19 2018 us=229920 Control Channel MTU parms [ L:1654 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Fri Apr 20 19:29:19 2018 us=229939 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Fri Apr 20 19:29:19 2018 us=229954 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Fri Apr 20 19:29:19 2018 us=229958 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Fri Apr 20 19:29:19 2018 us=229969 TCP/UDP: Preserving recently used remote address: [AF_INET]185.159.158.56:1194
Fri Apr 20 19:29:19 2018 us=229982 Socket Buffers: R=[212992->212992] S=[212992->212992]
Fri Apr 20 19:29:19 2018 us=229987 UDP link local: (not bound)
Fri Apr 20 19:29:19 2018 us=229991 UDP link remote: [AF_INET]185.159.158.56:1194
Fri Apr 20 19:29:19 2018 us=433235 TLS: Initial packet from [AF_INET]185.159.158.56:1194, sid=3240a380 c9cb45ae
Fri Apr 20 19:29:19 2018 us=845621 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Fri Apr 20 19:29:19 2018 us=846630 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Fri Apr 20 19:29:19 2018 us=847511 Validating certificate key usage
Fri Apr 20 19:29:19 2018 us=847554 ++ Certificate has key usage  00a0, expects 00a0
Fri Apr 20 19:29:19 2018 us=847572 VERIFY KU OK
Fri Apr 20 19:29:19 2018 us=847597 Validating certificate extended key usage
Fri Apr 20 19:29:19 2018 us=847620 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Apr 20 19:29:19 2018 us=847638 VERIFY EKU OK
Fri Apr 20 19:29:19 2018 us=847654 VERIFY OK: depth=0, CN=de-03.protonvpn.com
Fri Apr 20 19:29:20 2018 us=757543 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Apr 20 19:29:20 2018 us=757666 [de-03.protonvpn.com] Peer Connection Initiated with [AF_INET]185.159.158.56:1194
Fri Apr 20 19:29:21 2018 us=806012 SENT CONTROL [de-03.protonvpn.com]: 'PUSH_REQUEST' (status=1)
Fri Apr 20 19:29:22 2018 us=7391 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.8.1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,route-gateway 10.8.8.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.8.10 255.255.255.0,peer-id 8,cipher AES-256-GCM'
Fri Apr 20 19:29:22 2018 us=7591 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks 
Fri Apr 20 19:29:22 2018 us=7721 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 20 19:29:22 2018 us=7745 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Apr 20 19:29:22 2018 us=7761 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Fri Apr 20 19:29:22 2018 us=7791 Socket Buffers: R=[212992->425984] S=[212992->425984]
Fri Apr 20 19:29:22 2018 us=7807 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 20 19:29:22 2018 us=7822 OPTIONS IMPORT: route options modified
Fri Apr 20 19:29:22 2018 us=7836 OPTIONS IMPORT: route-related options modified
Fri Apr 20 19:29:22 2018 us=7936 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 20 19:29:22 2018 us=7961 OPTIONS IMPORT: peer-id set
Fri Apr 20 19:29:22 2018 us=7977 OPTIONS IMPORT: adjusting link_mtu to 1657
Fri Apr 20 19:29:22 2018 us=7992 OPTIONS IMPORT: data channel crypto options modified
Fri Apr 20 19:29:22 2018 us=8027 Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Fri Apr 20 19:29:22 2018 us=8217 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Apr 20 19:29:22 2018 us=8242 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Apr 20 19:29:22 2018 us=8475 ROUTE_GATEWAY 10.137.0.4
Fri Apr 20 19:29:22 2018 us=18579 TUN/TAP device tun0 opened
Fri Apr 20 19:29:22 2018 us=18676 TUN/TAP TX queue length set to 100
Fri Apr 20 19:29:22 2018 us=18722 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Apr 20 19:29:22 2018 us=18764 /sbin/ip link set dev tun0 up mtu 1500
Fri Apr 20 19:29:22 2018 us=21218 /sbin/ip addr add dev tun0 10.8.8.10/24 broadcast 10.8.8.255
Fri Apr 20 19:29:22 2018 us=25465 /etc/openvpn/update-resolv-conf tun0 1500 1585 10.8.8.10 255.255.255.0 init
Fri Apr 20 19:29:22 2018 us=30333 /sbin/ip route add 185.159.158.56/32 via 10.137.0.4
Fri Apr 20 19:29:22 2018 us=30841 /sbin/ip route add 0.0.0.0/1 via 10.8.8.1
Fri Apr 20 19:29:22 2018 us=31895 /sbin/ip route add 128.0.0.0/1 via 10.8.8.1
Fri Apr 20 19:29:22 2018 us=32904 Initialization Sequence Completed
Fri Apr 20 19:30:19 2018 us=622696 event_wait : Interrupted system call (code=4)
Fri Apr 20 19:30:19 2018 us=622724 SIGTERM received, sending exit notification to peer
Fri Apr 20 19:30:20 2018 us=133720 event_wait : Interrupted system call (code=4)
Fri Apr 20 19:30:20 2018 us=133902 TCP/UDP: Closing socket
Fri Apr 20 19:30:20 2018 us=133944 /sbin/ip route del 185.159.158.56/32
Fri Apr 20 19:30:20 2018 us=134494 /sbin/ip route del 0.0.0.0/1
Fri Apr 20 19:30:20 2018 us=134985 /sbin/ip route del 128.0.0.0/1
Fri Apr 20 19:30:20 2018 us=135429 Closing TUN/TAP interface
Fri Apr 20 19:30:20 2018 us=135449 /sbin/ip addr del dev tun0 10.8.8.10/24
Fri Apr 20 19:30:20 2018 us=140913 /etc/openvpn/update-resolv-conf tun0 1500 1585 10.8.8.10 255.255.255.0 init
Fri Apr 20 19:30:20 2018 us=141912 SIGTERM[hard,] received, process exiting
acwhite3 commented 6 years ago

Your last two updates appear to have introduced two new flavors of the problem again. After my last update to this ticket 17 days ago where I did a reinstall and reinit things have been working fine. I did the latest update yesterday and today received:

Connecting... [!] Error connecting to VPN. [!] There are issues in managing IPv6 in the system. Please test the system for the root cause. Not being able to manage IPv6 by protonvpn-cli might cause issues in leaking the system's IPv6 address.

I then did another update and received:

Connecting... [!] Error connecting to VPN.

However, using the fastest-connect option rather than the -connect option it worked:

sudo protonvpn-cli -fastest-connect Fetching ProtonVPN Servers... Connecting... [$] Connected! [#] New IP: 67.202.83.122

Disconnecting and using the -connect option again. Chose a different server and received same error

Connecting... [!] Error connecting to VPN.

When back to fastest-connect and it worked again.

xilopaint commented 6 years ago

@acwhite3 I find very unlikely the last commit has anything to do with the issue. Regarding the penultimate commit, I don't know it very much. Have you tried to revert the changes of these commits to see what happens?