[SOLVED] Mullvad VPN

[trinux]

Anyone here using Mullvad https://mullvad.net/en/ for VPN? I'm wondering what the best option is for setting it up on Mageia. Mullvad has .deb and a source downloads, as well as some instructions for OpenVPN setup, so I'm wondering if anyone has any thoughts on what will work best. I'm using MGA2, KDE, on a T430s thinkpad, FYI. Thanks.

trinux

[wintpe]

while ive never heard of the above,......

openvpn on mageia would be my recomendation

it works well, with little config needed.

i use it all the time.

regards peter

[neophyte]

Hello;
I cant make it efficient.
Find 4 ways to configure.
coud you tell us how you did
Thanks

[doktor5000]

@neophyte: Please don't crosspost, you already opened a thread about this: viewtopic.php?f=15&t=4398

[trinux]

So I've been playing around, trying to get this working with no luck so far. Compiling didn't work with either

Code: Select all

./configure
make
checkinstall

or

Code: Select all

rpmbuild -tb package.tar.gz

Alien generated a package, but it won't launch so that looks like a dead end. The GUI tool in the default network manager isn't connecting, and when I try to run it using OpenVPN I get the following error:

Code: Select all

Sat Feb 16 13:28:09 2013 OpenVPN 2.2.2 x86_64-mageia-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr 28 2012
Sat Feb 16 13:28:09 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Feb 16 13:28:09 2013 WARNING: file 'mullvad.key' is group or others accessible
Sat Feb 16 13:28:09 2013 LZO compression initialized
Sat Feb 16 13:28:09 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Feb 16 13:28:09 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Feb 16 13:28:09 2013 RESOLVE: NOTE: openvpn.mullvad.net resolves to 9 addresses
Sat Feb 16 13:28:09 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Feb 16 13:28:09 2013 Local Options hash (VER=V4): '41690919'
Sat Feb 16 13:28:09 2013 Expected Remote Options hash (VER=V4): '530fdded'
Sat Feb 16 13:28:09 2013 UDPv4 link local: [undef]
Sat Feb 16 13:28:09 2013 UDPv4 link remote: 95.211.136.21:1194
Sat Feb 16 13:28:10 2013 TLS: Initial packet from 95.211.136.21:1194, sid=7f79058f 7d8b6111
Sat Feb 16 13:28:12 2013 VERIFY OK: depth=2, /C=NA/ST=None/L=None/O=Mullvad/CN=Mullvad_CA/emailAddress=info@mullvad.net
Sat Feb 16 13:28:12 2013 VERIFY OK: depth=1, /C=NA/ST=None/L=None/O=Mullvad/CN=master.mullvad.net/emailAddress=info@mullvad.net
Sat Feb 16 13:28:12 2013 Validating certificate key usage
Sat Feb 16 13:28:12 2013 ++ Certificate has key usage  00a0, expects 00a0
Sat Feb 16 13:28:12 2013 VERIFY KU OK
Sat Feb 16 13:28:12 2013 Validating certificate extended key usage
Sat Feb 16 13:28:12 2013 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Feb 16 13:28:12 2013 VERIFY EKU OK
Sat Feb 16 13:28:12 2013 VERIFY OK: depth=0, /C=NA/ST=None/L=None/O=Mullvad/CN=nl6.mullvad.net/emailAddress=info@mullvad.net
Sat Feb 16 13:28:14 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 16 13:28:14 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 16 13:28:14 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Feb 16 13:28:14 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Feb 16 13:28:14 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Feb 16 13:28:14 2013 [nl6.mullvad.net] Peer Connection Initiated with 95.211.136.21:1194
Sat Feb 16 13:28:17 2013 SENT CONTROL [nl6.mullvad.net]: 'PUSH_REQUEST' (status=1)
Sat Feb 16 13:28:17 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ifconfig 10.8.1.2 10.8.1.1'
Sat Feb 16 13:28:17 2013 OPTIONS IMPORT: --ifconfig/up options modified
Sat Feb 16 13:28:17 2013 OPTIONS IMPORT: route options modified
Sat Feb 16 13:28:17 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Feb 16 13:28:17 2013 ROUTE default_gateway=10.0.1.1
Sat Feb 16 13:28:17 2013 TUN/TAP device tun0 opened
Sat Feb 16 13:28:17 2013 TUN/TAP TX queue length set to 100
Sat Feb 16 13:28:17 2013 /sbin/ifconfig tun0 10.8.1.2 pointopoint 10.8.1.1 mtu 1500
Sat Feb 16 13:28:17 2013 /etc/openvpn/update-resolv-conf tun0 1500 1542 10.8.1.2 10.8.1.1 init
Sat Feb 16 13:28:17 2013 WARNING: Failed running command (--up/--down): could not execute external program
Sat Feb 16 13:28:17 2013 Exiting

Any thoughts on how to get this connection working?

[trinux]

Just a quick update for anyone who stumbles across this thread. I managed to get this working by switching from the default drak-connect network tool to the knetwork-manager tool, along with openvpn/knetwork-manager-openvpn.

trinux