0

I am having to troubleshoot attaching OpenVPN AWS .ovpn file to my ubuntu 20.10 Network Manager. I tried troubleshooting using these articles:

How can I troubleshoot “VPN Connection Failed”?

VPN service connection failed because the VPN service failed to start

Nothing works.

May  6 08:27:59 krillavilla-OMN NetworkManager[59705]: <info>  [1620314879.3003] audit: op="connection-update" uuid="46b75e3d-9fa4-45f0-bd59-b2990749c6d3" name="client" args="vpn.data" pid=75463 uid=1000 result="success"
May  6 08:28:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314885.7743] audit: op="connection-activate" uuid="46b75e3d-9fa4-45f0-bd59-b2990749c6d3" name="client" pid=75463 uid=1000 result="success"
May  6 08:28:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314885.7848] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: Started the VPN service, PID 75519
May  6 08:28:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314885.8058] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: Saw the service appear; activating connection
May  6 08:28:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314885.8588] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN plugin: state changed: starting (3)
May  6 08:28:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314885.8589] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN connection: (ConnectInteractive) reply received
May  6 08:28:05 krillavilla-OMN nm-openvpn[75525]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'xxx-xxx-xxx' to --data-ciphers or change --cipher 'xxx-xxx-xxx' to --data-ciphers-fallback 'xxx-xxx-xxx' to silence this warning.
May  6 08:28:05 krillavilla-OMN nm-openvpn[75525]: OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 27 2021
May  6 08:28:05 krillavilla-OMN nm-openvpn[75525]: library versions: OpenSSL 1.1.1j  16 Feb 2021, LZO 2.10
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: NOTE: chroot will be delayed because of --client, --pull, or --up-delay
May  6 08:28:06 krillavilla-OMN nm-openvpn[75525]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:10 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:14 krillavilla-OMN nm-openvpn[75525]: Attempting to establish TCP connection with [AF_INET]xx.xxx.xx.xxx:xxxx [nonblock]
May  6 08:28:18 krillavilla-OMN nm-openvpn[75525]: TCP: connect to [AF_INET]xx.xxx.xx.xxx:xxxx failed: Connection timed out
May  6 08:28:18 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[connection failed(soft),init_instance] received, process restarting
May  6 08:28:23 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:23 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:23 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:23 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:23 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:27 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:31 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:35 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: UDP link local: (not bound)
May  6 08:28:39 krillavilla-OMN nm-openvpn[75525]: UDP link remote: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:28:43 krillavilla-OMN nm-openvpn[75525]: Server poll timeout, restarting
May  6 08:28:43 krillavilla-OMN nm-openvpn[75525]: SIGUSR1[soft,server_poll] received, process restarting
May  6 08:28:43 krillavilla-OMN nm-openvpn[75525]: WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
May  6 08:28:43 krillavilla-OMN nm-openvpn[75525]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 08:28:43 krillavilla-OMN nm-openvpn[75525]: TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xx.xxx:xxxx
May  6 08:29:05 krillavilla-OMN NetworkManager[59705]: <warn>  [1620314945.8071] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN connection: connect timeout exceeded.
May  6 08:29:05 krillavilla-OMN nm-openvpn-serv[75519]: Connect timer expired, disconnecting.
May  6 08:29:05 krillavilla-OMN nm-openvpn[75525]: event_wait : Interrupted system call (code=4)
May  6 08:29:05 krillavilla-OMN nm-openvpn[75525]: SIGTERM[hard,] received, process exiting
May  6 08:29:05 krillavilla-OMN NetworkManager[59705]: <warn>  [1620314945.8139] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN plugin: failed: connect-failed (1)
May  6 08:29:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314945.8139] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN plugin: state changed: stopping (5)
May  6 08:29:05 krillavilla-OMN NetworkManager[59705]: <info>  [1620314945.8140] vpn-connection[0x564e735e02b0,46b75e3d-9fa4-45f0-bd59-b2990749c6d3,"client",0]: VPN plugin: state changed: stopped (6)
2
  • Hi - The problem that you have is an AWS issue, and you can find info about that at AWS or other places May 6, 2021 at 18:05
  • @CharlesGreen I figured it out: May 6, 2021 at 21:14

1 Answer 1

1

Updates*

I had to modify the security group in AWS EC2. I opened port UDP 1192 to anywhere I opened port TCP 943 to anywhere

I was able to connect successfully

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.