Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Not connecting on new install #41

Closed
Tripp024 opened this issue Nov 15, 2018 · 3 comments
Closed

Not connecting on new install #41

Tripp024 opened this issue Nov 15, 2018 · 3 comments
Labels
bug Something isn't working

Comments

@Tripp024
Copy link

So qomui was working before but then I had to re-install my OS (Solus) because I messed up some files. Only bypass made the app crash.
Now I installed qomui again and it suddenly doesn't connect. I have no idea what's different this time.

Here is my log:
2018-11-15 09:52:45,650 - INFO - Qomui version 0.7.4
2018-11-15 09:52:45,652 - WARNING - [Errno 2] Bestand of map bestaat niet: '/home/timvh/.qomui/bypass_apps.json': Could not open /home/timvh/.qomui/bypass_apps.json
2018-11-15 09:52:45,653 - INFO - Total number of server: 264
2018-11-15 09:52:45,963 - INFO - Detected new network connection
2018-11-15 09:52:45,976 - INFO - Could not identify default gateway for ipv6 - no network connectivity
2018-11-15 09:52:46,010 - INFO - Deleted cgroup
2018-11-15 09:53:27,230 - INFO - iptables: adding exception for DNS requests
2018-11-15 09:53:27,477 - INFO - iptables: Allowing access to www.mullvad.net
2018-11-15 09:53:27,539 - INFO - iptables: Allowing access to api.mullvad.net
2018-11-15 09:53:27,544 - INFO - Downloading certificates for Mullvad
2018-11-15 09:53:28,318 - INFO - Fetching server list for Mullvad
2018-11-15 09:53:28,407 - INFO - Creating WireGuard config files for Mullvad
2018-11-15 09:53:28,864 - INFO - WireGuard is not installed/not found - skipping
2018-11-15 09:53:28,868 - ERROR - Copying ('mullvad_wg.conf', 'mullvad_wg.conf') to /usr/share/qomui/certs failed: No such file
2018-11-15 09:53:28,913 - INFO - iptables: removing exception for DNS requests
2018-11-15 09:53:29,034 - INFO - Total number of server: 265
2018-11-15 09:53:40,272 - INFO - Connecting to nl-ams-003.mullvad.net....
2018-11-15 09:53:40,294 - INFO - iptables: created rule for 185.65.134.133
2018-11-15 09:53:40,296 - INFO - Establishing new OpenVPN tunnel
2018-11-15 09:53:40,297 - INFO - Establishing connection to nl-ams-003.mullvad.net
2018-11-15 09:53:40,317 - INFO - OpenVPN: OpenVPN 2.4.6 x86_64-solus-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 11 2018
2018-11-15 09:53:40,317 - INFO - OpenVPN: library versions: OpenSSL 1.0.2p 14 Aug 2018, LZO 2.09
2018-11-15 09:53:40,318 - INFO - OpenVPN: NOTE: --fast-io is disabled since we are not using UDP
2018-11-15 09:53:40,319 - INFO - OpenVPN: CRL: cannot read CRL from file /usr/share/qomui/certs/mullvad_crl.pem
2018-11-15 09:53:40,319 - INFO - OpenVPN: TCP/UDP: Preserving recently used remote address: [AF_INET]185.65.134.133:443
2018-11-15 09:53:40,319 - INFO - OpenVPN: Socket Buffers: R=[87380->425984] S=[16384->425984]
2018-11-15 09:53:40,320 - INFO - OpenVPN: Attempting to establish TCP connection with [AF_INET]185.65.134.133:443 [nonblock]
2018-11-15 09:53:41,318 - INFO - OpenVPN: TCP connection established with [AF_INET]185.65.134.133:443
2018-11-15 09:53:41,319 - INFO - OpenVPN: TCP_CLIENT link local: (not bound)
2018-11-15 09:53:41,319 - INFO - OpenVPN: TCP_CLIENT link remote: [AF_INET]185.65.134.133:443
2018-11-15 09:53:41,345 - INFO - OpenVPN: TLS: Initial packet from [AF_INET]185.65.134.133:443, sid=8cf95079 fdb65c8e
2018-11-15 09:53:41,345 - INFO - OpenVPN: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2018-11-15 09:53:41,488 - INFO - OpenVPN: VERIFY WARNING: depth=0, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=nl-ams-003.mullvad.net, emailAddress=security@mullvad.net
2018-11-15 09:53:41,489 - INFO - OpenVPN: VERIFY WARNING: depth=1, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=Mullvad Transition-Intermediate CA v1, emailAddress=security@mullvad.net
2018-11-15 09:53:41,490 - INFO - OpenVPN: VERIFY WARNING: depth=2, unable to get certificate CRL: C=SE, ST=Gotaland, L=Gothenburg, O=Amagicom AB, OU=Mullvad, CN=Mullvad Root CA v2, emailAddress=security@mullvad.net
2018-11-15 09:53:41,490 - INFO - OpenVPN: VERIFY ERROR: CRL not loaded
2018-11-15 09:53:41,491 - INFO - OpenVPN: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
2018-11-15 09:53:41,491 - INFO - OpenVPN: TLS_ERROR: BIO read tls_read_plaintext error
2018-11-15 09:53:41,491 - INFO - OpenVPN: TLS Error: TLS object -> incoming plaintext read error
2018-11-15 09:53:41,491 - INFO - OpenVPN: TLS Error: TLS handshake failed
2018-11-15 09:53:41,492 - INFO - OpenVPN: Fatal TLS error (check_tls_errors_co), restarting
2018-11-15 09:53:41,492 - INFO - OpenVPN: SIGUSR1[soft,tls-error] received, process restarting
2018-11-15 09:53:41,492 - INFO - OpenVPN: Restart pause, 5 second(s)
2018-11-15 09:53:46,489 - INFO - OpenVPN: NOTE: --fast-io is disabled since we are not using UDP
2018-11-15 09:53:46,490 - INFO - OpenVPN: TCP/UDP: Preserving recently used remote address: [AF_INET]185.65.134.133:443
2018-11-15 09:53:46,490 - INFO - OpenVPN: Socket Buffers: R=[87380->425984] S=[16384->425984]
2018-11-15 09:53:46,491 - INFO - OpenVPN: Attempting to establish TCP connection with [AF_INET]185.65.134.133:443 [nonblock]
2018-11-15 09:53:47,490 - INFO - OpenVPN: TCP connection established with [AF_INET]185.65.134.133:443
2018-11-15 09:53:47,490 - INFO - OpenVPN: TCP_CLIENT link local: (not bound)
2018-11-15 09:53:47,491 - INFO - OpenVPN: TCP_CLIENT link remote: [AF_INET]185.65.134.133:443
2018-11-15 09:53:47,516 - INFO - OpenVPN: TLS: Initial packet from [AF_INET]185.65.134.133:443, sid=d92164d8 7cbe2bee
2018-11-15 09:53:47,658 - INFO - OpenVPN: VERIFY WARNING: depth=0, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=nl-ams-003.mullvad.net, emailAddress=security@mullvad.net
2018-11-15 09:53:47,659 - INFO - OpenVPN: VERIFY WARNING: depth=1, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=Mullvad Transition-Intermediate CA v1, emailAddress=security@mullvad.net
2018-11-15 09:53:47,659 - INFO - OpenVPN: VERIFY WARNING: depth=2, unable to get certificate CRL: C=SE, ST=Gotaland, L=Gothenburg, O=Amagicom AB, OU=Mullvad, CN=Mullvad Root CA v2, emailAddress=security@mullvad.net
2018-11-15 09:53:47,659 - INFO - OpenVPN: VERIFY ERROR: CRL not loaded
2018-11-15 09:53:47,660 - INFO - OpenVPN: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
2018-11-15 09:53:47,660 - INFO - OpenVPN: TLS_ERROR: BIO read tls_read_plaintext error
2018-11-15 09:53:47,661 - INFO - OpenVPN: TLS Error: TLS object -> incoming plaintext read error
2018-11-15 09:53:47,662 - INFO - OpenVPN: TLS Error: TLS handshake failed
2018-11-15 09:53:47,662 - INFO - OpenVPN: Fatal TLS error (check_tls_errors_co), restarting
2018-11-15 09:53:47,662 - INFO - OpenVPN: SIGUSR1[soft,tls-error] received, process restarting
2018-11-15 09:53:47,662 - INFO - OpenVPN: Restart pause, 5 second(s)
2018-11-15 09:53:52,659 - INFO - OpenVPN: NOTE: --fast-io is disabled since we are not using UDP
2018-11-15 09:53:52,660 - INFO - OpenVPN: TCP/UDP: Preserving recently used remote address: [AF_INET]185.65.134.133:443
2018-11-15 09:53:52,660 - INFO - OpenVPN: Socket Buffers: R=[87380->425984] S=[16384->425984]
2018-11-15 09:53:52,661 - INFO - OpenVPN: Attempting to establish TCP connection with [AF_INET]185.65.134.133:443 [nonblock]
2018-11-15 09:53:53,659 - INFO - OpenVPN: TCP connection established with [AF_INET]185.65.134.133:443
2018-11-15 09:53:53,660 - INFO - OpenVPN: TCP_CLIENT link local: (not bound)
2018-11-15 09:53:53,660 - INFO - OpenVPN: TCP_CLIENT link remote: [AF_INET]185.65.134.133:443
2018-11-15 09:53:53,686 - INFO - OpenVPN: TLS: Initial packet from [AF_INET]185.65.134.133:443, sid=bc221b77 d30a8c13
2018-11-15 09:53:53,833 - INFO - OpenVPN: VERIFY WARNING: depth=0, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=nl-ams-003.mullvad.net, emailAddress=security@mullvad.net
2018-11-15 09:53:53,834 - INFO - OpenVPN: VERIFY WARNING: depth=1, unable to get certificate CRL: C=SE, ST=Gotaland, O=Amagicom AB, OU=Mullvad, CN=Mullvad Transition-Intermediate CA v1, emailAddress=security@mullvad.net
2018-11-15 09:53:53,834 - INFO - OpenVPN: VERIFY WARNING: depth=2, unable to get certificate CRL: C=SE, ST=Gotaland, L=Gothenburg, O=Amagicom AB, OU=Mullvad, CN=Mullvad Root CA v2, emailAddress=security@mullvad.net
2018-11-15 09:53:53,835 - INFO - OpenVPN: VERIFY ERROR: CRL not loaded
2018-11-15 09:53:53,835 - INFO - OpenVPN: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
2018-11-15 09:53:53,835 - INFO - OpenVPN: TLS_ERROR: BIO read tls_read_plaintext error
2018-11-15 09:53:53,835 - INFO - OpenVPN: TLS Error: TLS object -> incoming plaintext read error
2018-11-15 09:53:53,836 - INFO - OpenVPN: TLS Error: TLS handshake failed
2018-11-15 09:53:53,836 - INFO - OpenVPN: Fatal TLS error (check_tls_errors_co), restarting
2018-11-15 09:53:53,836 - INFO - OpenVPN: SIGUSR1[soft,tls-error] received, process restarting
2018-11-15 09:53:53,836 - INFO - OpenVPN: Restart pause, 5 second(s)
2018-11-15 09:53:55,475 - INFO - nl-ams-003.mullvad.net: Connection attempt timed out
2018-11-15 09:53:55,522 - INFO - OpenVPN: SIGTERM[hard,init_instance] received, process exiting
2018-11-15 09:53:55,528 - INFO - OpenVPN:
2018-11-15 09:53:55,529 - INFO - OpenVPN:
2018-11-15 09:53:55,530 - INFO - OpenVPN - process killed
2018-11-15 09:53:55,543 - INFO - Openvpn connection closed
@corrad1nho corrad1nho added the bug Something isn't working label Nov 15, 2018
@corrad1nho
Copy link
Owner

Mullvad updated/changed OpenVPN certificates on their github repository: mullvad/mullvadvpn-app@c7f7b00#diff-837c53b6a26b45e8c8185a29e0f2f3c1

crl.pem was deleted altogether that's why it's not working. As a short term workaround until I'll have a fix for that, you can download the certificates from https://mullvad.net/en/download/config/ and save them as mullvad_ca.crt and mullvad_crl.pem in /usr/share/qomui/certs/.

Alternatively, download OpenVPN files from the Mullvad homepage and import them manually.

@corrad1nho
Copy link
Owner

There is an easier workaround: Delete or comment out the following line from your Mullvad config:
crl-verify /usr/share/qomui/certs/mullvad_crl.pem

You can do this either directly by editing /usr/share/qomui/Mullvad_config or using the modify option in Qomui's server tab.

@corrad1nho
Copy link
Owner

Fixed in v0.8.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Tripp024 @corrad1nho