Всем привет!
Использую NetworkManager, хотя при подключении через командную строку результат тот же.
Иногда подключиться удается, иногда - нет. Не могу определить, от чего зависит.
Логи при неудачной попытке:
Jun 14 14:51:45 arch NetworkManager[879]: <info> [1749887505.2329] vpn[0x55996b7be0e0,d504b14c-ed11-467e-9182-7055c55c4a29,"antizapret-tcp"]: starting openvpn
Jun 14 14:51:45 arch NetworkManager[879]: <info> [1749887505.2337] audit: op="connection-activate" uuid="d504b14c-ed11-467e-9182-7055c55c4a29" name="antizapret-tcp" pid=1323 uid=1000 result="success"
Jun 14 14:51:45 arch nm-openvpn[40014]: DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
Jun 14 14:51:45 arch nm-openvpn[40014]: OpenVPN 2.6.14 [git:makepkg/f588592ee6c6323b+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Apr 2 2025
Jun 14 14:51:45 arch nm-openvpn[40014]: library versions: OpenSSL 3.5.0 8 Apr 2025, LZO 2.10
Jun 14 14:51:45 arch nm-openvpn[40014]: DCO version: N/A
Jun 14 14:51:45 arch nm-openvpn[40014]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jun 14 14:51:45 arch nm-openvpn[40014]: TCP/UDP: Preserving recently used remote address: [AF_INET]51.75.70.203:1194
Jun 14 14:51:45 arch nm-openvpn[40014]: Attempting to establish TCP connection with [AF_INET]51.75.70.203:1194
Jun 14 14:51:45 arch nm-openvpn[40014]: TCP connection established with [AF_INET]51.75.70.203:1194
Jun 14 14:51:45 arch nm-openvpn[40014]: TCPv4_CLIENT link local: (not bound)
Jun 14 14:51:45 arch nm-openvpn[40014]: TCPv4_CLIENT link remote: [AF_INET]51.75.70.203:1194
Jun 14 14:51:45 arch nm-openvpn[40014]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Jun 14 14:52:45 arch NetworkManager[879]: <warn> [1749887565.7873] vpn[0x55996b7be0e0,d504b14c-ed11-467e-9182-7055c55c4a29,"antizapret-tcp"]: connect timeout exceeded
Jun 14 14:52:45 arch nm-openvpn-serv[40009]: Connect timer expired, disconnecting.
Jun 14 14:52:45 arch nm-openvpn[40014]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jun 14 14:52:45 arch nm-openvpn[40014]: TLS Error: TLS handshake failed
Jun 14 14:52:45 arch nm-openvpn[40014]: Fatal TLS error (check_tls_errors_co), restarting
Jun 14 14:52:45 arch nm-openvpn[40014]: SIGTERM[hard,] received, process exiting
Удачная попытка:
Jun 14 20:12:42 arch NetworkManager[879]: <info> [1749906762.7516] vpn[0x55996b762850,d504b14c-ed11-467e-9182-7055c55c4a29,"antizapret-tcp"]: starting openvpn
Jun 14 20:12:42 arch NetworkManager[879]: <info> [1749906762.7519] audit: op="connection-activate" uuid="d504b14c-ed11-467e-9182-7055c55c4a29" name="antizapret-tcp" pid=1323 uid=1000 result="success"
Jun 14 20:12:42 arch nm-openvpn[47978]: DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
Jun 14 20:12:42 arch nm-openvpn[47978]: OpenVPN 2.6.14 [git:makepkg/f588592ee6c6323b+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Apr 2 2025
Jun 14 20:12:42 arch nm-openvpn[47978]: library versions: OpenSSL 3.5.0 8 Apr 2025, LZO 2.10
Jun 14 20:12:42 arch nm-openvpn[47978]: DCO version: N/A
Jun 14 20:12:42 arch nm-openvpn[47978]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jun 14 20:12:42 arch nm-openvpn[47978]: TCP/UDP: Preserving recently used remote address: [AF_INET]51.158.176.255:1194
Jun 14 20:12:42 arch nm-openvpn[47978]: Attempting to establish TCP connection with [AF_INET]51.158.176.255:1194
Jun 14 20:12:43 arch nm-openvpn[47978]: TCP connection established with [AF_INET]51.158.176.255:1194
Jun 14 20:12:43 arch nm-openvpn[47978]: TCPv4_CLIENT link local: (not bound)
Jun 14 20:12:43 arch nm-openvpn[47978]: TCPv4_CLIENT link remote: [AF_INET]51.158.176.255:1194
Jun 14 20:12:43 arch nm-openvpn[47978]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Jun 14 20:12:43 arch nm-openvpn[47978]: [antizapret-server-shared] Peer Connection Initiated with [AF_INET]51.158.176.255:1194
Jun 14 20:12:43 arch nm-openvpn[47978]: Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:4: block-outside-dns (2.6.14)
Jun 14 20:12:43 arch nm-openvpn[47978]: TUN/TAP device tun0 opened
Jun 14 20:12:43 arch nm-openvpn[47978]: /usr/lib/nm-openvpn-service-openvpn-helper --debug 0 47973 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_24 --tun -- tun0 1500 0 192.168.115.109 255.255.248.0 init
Jun 14 20:12:43 arch NetworkManager[879]: <info> [1749906763.8031] manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/19)
Jun 14 20:12:43 arch nm-openvpn[47978]: UID set to nm-openvpn
Jun 14 20:12:43 arch nm-openvpn[47978]: GID set to nm-openvpn
Jun 14 20:12:43 arch nm-openvpn[47978]: Capabilities retained: CAP_NET_ADMIN
Jun 14 20:12:43 arch nm-openvpn[47978]: Initialization Sequence Completed
В чем может быть проблема?