Arch Linux User Repository

Please note the following requirements for AWS VPN Client:

• If you depend on DNS servers from VPN you need to have a running systemd-resolved.service. Please ensure it does not conflict with any other DNS resolver service or configuration you may use. sudo systemctl --now enable systemd-resolved.service

• You have to enable and start the awsvpnclient.service after installation: sudo systemctl --now enable awsvpnclient

For troubelshooting its worth checking first the logs:

/home/$USER/.config/AWSVPNClient/
/var/log/aws-vpn-client/$USER/

See also the official docs: https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-linux.html

If you face any other problem please check the troubleshooting guide (DNS issues): https://docs.aws.amazon.com/vpn/latest/clientvpn-user/linux-troubleshooting.html#aws-provided-client

I found you can get rid of the error by going to ~/.config/AWSVPNClient, open the Preferences file and edit it to: {"Version":"1","IsMetricsEnabled":false} (that is, disabling metrics). This avoids trying to load the broken library. I also tried to find this library somewhere but got nowhere with that... But at least it works now. I would create a patch but don't know how to do it, and also not sure if it's the correct thing to do in this case.

Unable to install 5.3.1-1 at the moment, complaining about SQLite.Interop.dll that doesn't exist. Also tried to clear the cache without any luck.

==> Starting package()...
chmod: cannot access '/home/skela/.cache/paru/clone/awsvpnclient/pkg/awsvpnclient/opt/awsvpnclient/SQLite.Interop.dll': No such file or directory
==> ERROR: A failure occurred in package().
    Aborting...
error: failed to build 'awsvpnclient-5.3.1-1':
error: packages failed to build: awsvpnclient-5.3.1-1

Package is a little bit broken but here's a fix. I took the liberty of fixing the .desktop file as well (StartupWMClass specified twice, icons should not have extension.)

diff --git a/PKGBUILD b/PKGBUILD
index cf72f95..ae7984e 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Richard Hillmann <richie at project0 dot de>
 pkgname=awsvpnclient
 pkgver=5.3.1
-pkgrel=1
+pkgrel=2
 pkgdesc="AWS VPN Client"
 arch=('x86_64')
 license=('custom')
@@ -11,7 +11,7 @@ source=(
   'awsvpnclient.desktop.patch'
 )
 sha512sums=('dcb662f360c8475d5aad07983467a8be0617a19180d97229f7b2f49b66ec478cb40146aa66aa138229c77cd0d5ae1d7490612b51ce6b4d52d5922e206e746669'
-            'a9c46dbaf6588f0de9f3687e07bb30f6a0671c43673c86123e43192e7fc2279ca53c61e473ca22014a712980b9110d1ba19bf2d7ded8b20d74bdd5d70f118434')
+            '54aea57182370d7d336422136abbb0080d4958aa6cf44a215f698df1ab0aebc6bc983806d251cd5d26e115886d8b78a49e2543eb11a8892c75ef23bc5cb4cd62')
 depends=('xdg-utils' 'lsof')
 makedepends=('zstd')
 options=('!strip' 'staticlibs')
@@ -23,10 +23,10 @@ package(){
   # Apply patch to fix desktop file
   patch -s "${pkgdir}/usr/share/applications/awsvpnclient.desktop" "${srcdir}/awsvpnclient.desktop.patch"

-  # Workaround for missing compatibility of the SQL library with arch linux:
-  # Intentionally break the metrics agent,
-  # it will be unable to laod the dynamic lib and wont start but continue with error message
-  chmod 000 "${pkgdir}/opt/awsvpnclient/SQLite.Interop.dll"
+  # Workaround for missing compatibility of the SQL library with ArchLinux.
+  # Intentionally break the metrics agent. It will fail loading the dynamic library but app will start and
+  # continue working instead of segmentation fault upon start.
+  chmod 000 "${pkgdir}/opt/awsvpnclient/libe_sqlite3.so"

   # Permission fix
   find "${pkgdir}" -type d -exec chmod 755 {} +
diff --git a/awsvpnclient.desktop.patch b/awsvpnclient.desktop.patch
index 42879a4..3a9a44b 100644
--- a/awsvpnclient.desktop.patch
+++ b/awsvpnclient.desktop.patch
@@ -1,13 +1,16 @@
-Fix the Exec line in the awsvpnclient.desktop file to use the correct path and escape spaces
---- awsvpnclient.desktop   2024-12-13 18:14:19.456730536 +0100
-+++ "awsvpnclient.desktop" 2025-21-05 12:30:0.140056958 +0100
-@@ -3,7 +3,8 @@
+--- awsvpnclient.desktop.orig  2025-11-08 16:49:08.417154112 +0200
++++ awsvpnclient.desktop   2025-11-08 16:50:05.750355913 +0200
+@@ -3,11 +3,10 @@
  Encoding=UTF-8
  Name=AWS VPN Client
  Comment=AWS VPN Client
 -Exec="/opt/awsvpnclient/AWS\sVPN\sClient" %u
-+StartupWMClass=AWS VPN Client
 +Exec="/opt/awsvpnclient/AWS VPN Client" %u
  Path=/opt/awsvpnclient
- Icon=acvc-64.png
+-Icon=acvc-64.png
++Icon=acvc-64
  Terminal=false
+ Categories=Network;VPN;
+ Keywords=vpn;aws;
+ StartupWMClass=AWS VPN Client
+-

Getting the following chmod error:

chmod: cannot access '/home/cameron/.cache/paru/clone/awsvpnclient/pkg/awsvpnclient/opt/awsvpnclient/SQLite.Interop.dll': No such file or directory

Looks like it's no longer in the extracted files. Attempted simply commenting out the relevant line in the PKGBUILD, but I'm getting a seg fault when doing so. I assume we need to figure out what the file was renamed to, or if there's another workaround.

Thank you for putting this in AUR. Would it be possible for it to get updated to v5; which supports multiple connections.

@project0 The latest changes work for me, with one minor change I needed on my end (Running X11 with XFCE)

diff --git a/awsvpnclient.desktop.patch b/awsvpnclient.desktop.patch
index a95757d..be462ac 100644
--- a/awsvpnclient.desktop.patch
+++ b/awsvpnclient.desktop.patch
@@ -4,7 +4,8 @@
  Encoding=UTF-8
  Name=AWS VPN Client
  Comment=AWS VPN Client
+-Exec="/opt/awsvpnclient/AWS\sVPN\sClient" %u
 +StartupWMClass=AWS VPN Client
- Exec="/opt/awsvpnclient/AWS\sVPN\sClient" %u
++Exec="/opt/awsvpnclient/AWS\ VPN\ Client" %u
  Path=/opt/awsvpnclient
  Icon=acvc-64.png

Apparently the \s doesn't work quite right so I had to change them to space characters.

Hey there, there had been some significant updates:

• desktop file fixed the whitespaces, patching the the additional StartupWMClass
• openssl 3.0 is bundled with openvpn and fips module support has been adopted from original debian install scripts.
• removing openssl-1.1 dependency, it should no longer be necessary.
• .NET 3 -> 8 removing the icu patch fix, translation should work again.

I have currently no AWS Client VPN running somewhere, so i couldnt test the connection fully at my own. Please let me know if this is not working, also check the logs in case of problem.

Sorry guys, i actually tested the build locally and it did look fine to me, but it turned out to be some caching issue. Reverted the change and will look at the weekend into. I apologize for the late response.

I agree, and if maintainer doesn't have time to "fix", just revert the last change for now:

git revert 56a25519f56a6bbd8b8f1fbd1e381bd95c25a5d9

PKGBUILD is completely broken, maintainer please build the package ONCE before publishing a new version.