VPN is no longer working

I’m a relative newbie to Arch-based distro (though not a Linux newbie by any stretch!), and up until late December, I had no problems connecting to my VPN service. Now, I can no longer connect whether from the command line or setting it up through the network settings. For the latter, I get an error saying “Necessary secrets for the VPN connection … were not provided”. And from the command line, I get a “Network is unreachable” error, though the connection itself doesn’t fail. The terminal output is below:

<strong> Enter Auth Password: *****************************
2022-02-20 12:55:38 TCP/UDP: Preserving recently used remote address: [AF_INET]185.156.175.202:1194
2022-02-20 12:55:38 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-02-20 12:55:38 UDP link local: (not bound)
2022-02-20 12:55:38 UDP link remote: [AF_INET]185.156.175.202:1194
2022-02-20 12:55:38 TLS: Initial packet from [AF_INET]185.156.175.202:1194, sid=b8de7a81 0fa6eeee
2022-02-20 12:55:38 VERIFY OK: depth=1, CN=Privado
2022-02-20 12:55:38 VERIFY KU OK
2022-02-20 12:55:38 Validating certificate extended key usage
2022-02-20 12:55:38 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2022-02-20 12:55:38 VERIFY EKU OK
2022-02-20 12:55:38 VERIFY X509NAME OK: CN=zrh-002.vpn.privado.io
2022-02-20 12:55:38 VERIFY OK: depth=0, CN=zrh-002.vpn.privado.io
2022-02-20 12:55:38 Control Channel: TLSv1.2, cipher SSLv3 DHE-RSA-AES256-SHA, peer certificate: 4096 bit RSA, signature: RSA
-SHA512
2022-02-20 12:55:38 [zrh-002.vpn.privado.io] Peer Connection Initiated with [AF_INET]185.156.175.202:1194
2022-02-20 12:55:39 SENT CONTROL [zrh-002.vpn.privado.io]: 'PUSH_REQUEST' (status=1)
2022-02-20 12:55:40 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 198.18.0.1,
dhcp-option DNS 198.18.0.2,rcvbuf 493216,sndbuf 493216,explicit-exit-notify 5,route-gateway 172.21.36.1,topology subnet,ping
20,ping-restart 40,ifconfig 172.21.36.239 255.255.254.0,peer-id 8'
2022-02-20 12:55:40 OPTIONS IMPORT: timers and/or timeouts modified
2022-02-20 12:55:40 OPTIONS IMPORT: explicit notify parm(s) modified
2022-02-20 12:55:40 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
2022-02-20 12:55:40 Socket Buffers: R=[212992->425984] S=[212992->425984]
2022-02-20 12:55:40 OPTIONS IMPORT: --ifconfig/up options modified
2022-02-20 12:55:40 OPTIONS IMPORT: route options modified
2022-02-20 12:55:40 OPTIONS IMPORT: route-related options modified
2022-02-20 12:55:40 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2022-02-20 12:55:40 OPTIONS IMPORT: peer-id set
2022-02-20 12:55:40 OPTIONS IMPORT: adjusting link_mtu to 1624
2022-02-20 12:55:40 Using peer cipher 'AES-256-CBC'
2022-02-20 12:55:40 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-02-20 12:55:40 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-02-20 12:55:40 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-02-20 12:55:40 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-02-20 12:55:40 net_route_v4_best_gw query: dst 0.0.0.0
2022-02-20 12:55:40 net_route_v4_best_gw result: via 192.168.55.1 dev eno1
2022-02-20 12:55:40 ROUTE_GATEWAY 192.168.55.1/255.255.255.0 IFACE=eno1 HWADDR=38:d5:47:ac:8c:13
2022-02-20 12:55:40 GDG6: remote_host_ipv6=n/a
2022-02-20 12:55:40 net_route_v6_best_gw query: dst ::
2022-02-20 12:55:40 sitnl_send: rtnl: generic error (-101): Network is unreachable
2022-02-20 12:55:40 ROUTE6: default_gateway=UNDEF
2022-02-20 12:55:40 TUN/TAP device tun0 opened
2022-02-20 12:55:40 net_iface_mtu_set: mtu 1500 for tun0
2022-02-20 12:55:40 net_iface_up: set tun0 up
2022-02-20 12:55:40 net_addr_v4_add: 172.21.36.239/23 dev tun0
2022-02-20 12:55:43 net_route_v4_add: 185.156.175.202/32 via 192.168.55.1 dev [NULL] table 0 metric -1
2022-02-20 12:55:43 net_route_v4_add: 0.0.0.0/1 via 172.21.36.1 dev [NULL] table 0 metric -1
2022-02-20 12:55:43 net_route_v4_add: 128.0.0.0/1 via 172.21.36.1 dev [NULL] table 0 metric -1
2022-02-20 12:55:43 net_route_v4_add: 0.0.0.0/0 via 172.21.36.1 dev [NULL] table 0 metric -1
2022-02-20 12:55:43 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, ther
efore the route installation may fail or may not work as expected.
2022-02-20 12:55:43 add_route_ipv6(::/0 -> :: metric -1) dev tun0
2022-02-20 12:55:43 net_route_v6_add: ::/0 via :: dev tun0 table 0 metric -1
2022-02-20 12:55:43 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2022-02-20 12:55:43 Initialization Sequence Completed</strong>

Interestingly enough, this problem began after the last update to Atlantis Neo. Could this have possibly broken my VPN connections? Any help would be appreciated, and I am sincerely hoping the problem can be resolved because I love EndeavourOS and would hate to switch back to a Debian-based distro.

Check which packages were updated, either by looking in /var/log/pacman.log or the output of paclog.

Also keep in mind that a paid-for service will have technical support routes.

I did check the logs, that OpenVPN was updated around the same time. I rolled it back to the previous version, still not working. I could try rolling back network-manager and see if that helps.

Actually, I checked with Privado first, and all they did was give me an updated list of .opvn files, which did take care of the “network unreachable” error but I still couldn’t connect and told them I’d check here for a possible solution.

Which country are you in?
It’s a shame Privado only has wireguard support on its app.

I’m behind a massive firewall, if you know where has that, and there have been almost daily blocks on ports.

EDIT: I just reread my post and realised it appears like I use Privado. I don’t. I was just stating that where you live could determine how reliable a VPN will be, and that I have experienced port blocking. Sorry for any misunderstanding.

1 Like