27

I am trying to import a .ovpn file from the network manager. Here are the steps I follow.

Network Manager → VPN Connections → configure VPN

This opens the Network Connections dialogue. Then,

Add → import saved vpn configuration → choose .ovpn file

This should load my .ovpn configuration, but instead I get a prompt saying

ERROR: plugin does not support import capability.

I can still use VPN using the command

sudo openvpn --config ~/openvpn/xxx.conf

is this a bug that needs to be filed?

  • 1
    I had a similar problem importing the .ovpn file on one of 2 32 bit installs I updated to Lubuntu 16.04 yesterday. I was ab le to enter the config manually and get it to work. The puzzling thing to me is why it failed on one system and not the other. – Organic Marble Apr 22 '16 at 11:19

10 Answers 10

17

On commenting out the following line, I was able to successfully import the VPN config:

route remote_host 255.255.255.255 net_gateway default

Others have reported that commenting out, or removing, this line works for them as well per bug #606365 in launchpad in spite of this being a valid argument.

That said, while I'm able to successfully connect to the VPN, I'm not able to hit any host over the VPN. On trying to manually set these values using the network manager GUI, I see that only numerical IP addresses are accepted. String values like remote_host or net_gateway cannot be entered via the GUI.

I've also had success importing the same .OVPN file without any modification in Fedora 23, Windows 10 (using Viscosity), OS X El Capitan (using Viscosity) and earlier versions of Ubuntu. Something is definitely broken in 16.04.

  • 5
    remove "route remote_host 255.255.255.255 net_gateway default" then go to IPv4 settings => routes => Check the option “Use this connection only for resources on its network” => press OK => Save. Now you can connect VPN and access to remote host. – Guille Acosta Mar 10 '17 at 19:34
  • 1
    Thanks but that didn't work for me. I was able to successfully connect to the VPN but I was not able to access any hosts over the VPN connection. – Karthic Raghupathi Mar 12 '17 at 19:31
  • Worked for me on Fedora 26 – Heinrich Ulbricht May 17 '18 at 21:17
17

I know this is an old question but since I still couldn't find an (easy) answer I want to help others (and future me).

Use this

sudo nmcli connection import type openvpn file FILE_NAME

offcourse replace FILE_NAME with the full path to your file name

This will tell you exactly what's wrong with the file and which lines you should edit/delete.

After you edited the file with the recommendations the command gave you. You can import the file.

  • 1
    Thanks. This method allow to understand the problem. It show error messages. In my case errors emerged from deprecated options in .ovpn file. – PRIHLOP Feb 15 '18 at 11:53
  • Tried a lot of methods but none of them worked. Using this command i found where is the error. Thanks! – Agustin Baez Apr 17 '18 at 12:52
  • Using this tells you what the problem exactly was, instead of the unhelpful error message you get from the GUI. Thanks. – rgin Sep 22 '18 at 19:25
9

worked for me:

sudo apt install network-manager-openvpn-gnome
  • This is how I remember configuring OpenVPN saved configurations (exported from other applications) in previous versions of Ubuntu (12.04, 14.04). I'm not sure I had to install this package in those cases, though. Anyway, thanks for the tip! – nicorellius Feb 18 '17 at 13:44
  • That worked on kali too – Abiral Sep 11 '17 at 6:03
  • Works on Ubuntu 17.10... Remember to close settings and reopen. – jdc91 Jan 22 '18 at 14:17
  • Working in Ubuntu 18.04. I exported one file from a router (archer60) with the extension .ovpn and was not able to import the keys and the settings to enable the VPN. Installing that package solved the issue. – Alessandro D'lncal Sep 2 '18 at 12:36
2

Importing .ovpn profiles inside network manager has recently been improved, but there are still bugs and misleading error messages. Sometimes you can successfully import the .ovpn file by removing a single line that breaks the import procedure. In my case, I removed the line float 1 from my .ovpn file and the file has been imported successfully.

  • 3
    I think we should gather these potential solutions into a wiki answer because they may or may not work and there's no point in lowering someone's stackoverflow rep because one particular workaround didn't work – Rudolf Olah Feb 14 '17 at 14:59
2
  1. open your .ovpn file with any editor
  2. add # to the beginning of this line to comment it out

    route remote_host 255.255.255.255 net_gateway default

  3. Go to IPv4 settings > routes > Check the option “Use this connection only for resources on its network” > press OK > Save

Done!

This is just a wrap up of what worked for me on ubuntu 16.04 based on the other answers and comments here.

  • Did not seem ti fix my issue. But I keep looking for a fix. – jfmessier May 11 '18 at 21:02
  • Worked for me on Fedora 26 – Heinrich Ulbricht May 17 '18 at 21:16
1

I am experiencing the same issue. It looks like a bug, according to this link: https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/606365

  • I do not think it is the exact same bug. The workaround posted (#14) in the bugs link that you have shared does not apply to me. The suggested workaround is to have separate key and cert files instead of tags in the ovpn file. My ovpn file already does not contain any tags. cert and key are in separate files as well. – saitiku May 7 '16 at 1:41
  • See the solution #77: bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/… – jgomo3 Nov 1 '16 at 15:45
1

For me (Ubuntu 16.04.1 LTS), removing the section <extra-certs> worked.

Here is the ovpn file generated by a tunnel provider.

setenv USERNAME "user@provider.xx"
client
dev tun
remote host 1194 udp
remote host 1194 udp
remote host 443 tcp
remote host 1194 udp
remote host 1194 udp
remote host 1194 udp
remote host 1194 udp
remote host 1194 udp
remote-cert-tls server
comp-lzo no
auth SHA1
nobind
verb 3
sndbuf 0
rcvbuf 0
socket-flags TCP_NODELAY

<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>

<extra-certs>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</extra-certs>

<key>
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
</key>

key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
## -----BEGIN RSA SIGNATURE-----
## DIGEST:SHA1WithRSA
## -----END RSA SIGNATURE-----
## -----BEGIN CERTIFICATE-----
## -----END CERTIFICATE-----
## -----BEGIN CERTIFICATE-----
## -----END CERTIFICATE-----
## -----BEGIN CERTIFICATE-----
## -----END CERTIFICATE-----
  • I do not have this field in my file. Can you share your file structure with us ? – saitiku Aug 20 '16 at 19:20
  • Sure. Answer edited. – malaise Aug 21 '16 at 20:11
  • I do not have an extra-certs section in my file and it still fails. – Rudolf Olah Feb 14 '17 at 2:53
1

Its working :) from https://zorrovpn.com/howto/openvpn/ubuntu?lang=en

Open .ovpn file with a text editor.

And change lines that looks like

remote 11.2.2.2 443 tcp-client

to

remote 11.2.2.2
port 443
proto tcp-client

Then save .ovpn file and try again to import VPN connection.

0

I've found out that changing

remote REMOTE_SERVER 12345

with

remote REMOTE_SERVER
port 12345

Fixed the issue.

  • 1
    my file already has this. I still get the error described. – saitiku Aug 20 '16 at 19:33
0

In my case the following item caused the problem:

float 1

After commenting it out, it worked:

#float 1

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.