Arch Linux User Repository

The problems connecting to openvpn are unrelated to the kernel version. They occur if one uses the updated default /etc/sudoers content.

There has been an update recently: https://gitlab.archlinux.org/archlinux/packaging/packages/sudo/-/commit/4791df5c3deb6355e6a1fe0b40a13ef27ad060b0

that changes

# Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

to

Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

Activating the secure_path setting will prevent cyberghostvpn from running the /usr/local/cyberghost/openvpn wrapper. This means the original /usr/bin/openvpn wrapper gets called with the unsupported --ncp-disable parameter again - and fails.

To make cyberghostvpn work again with openvpn

a) either comment out the Defaults secure_path=... line in /etc/sudoers again

b) or add /usr/local/cyberghost to the beginning of that line

/etc/sudoers

Defaults secure_path="/usr/local/cyberghost:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

c) or downgrade openvpn to <2.6 - that makes it support the --ncp-disable command line parameter again

@SR-G Could you get me the URLs for those downloads?

Copy the links from the browser and run this on them:

curl -Ls -o /dev/null -w '%{url_effective}\n' "$LINK_HERE"

I'm also unable to have cyberghostvpn working on archlinux with this AUR package (but it seems there is a temporary workaround, see at the end) :

• same error than others with "openvpn" : "Connecting ... An error occured! The VPN connection failed!"
• nothing happening (no error, but also no connections" with "--wireguard" : the command ends immediately but when checking with "cyberghostvpn --status", i have the "No VPN connections found" message

I'm surprised by the version reported by that AUR package : when i install the package, it tells it is 1.4.1, but when i launch the cyberghostvpn binary (without any paramters), it reports as ... still being 1.3.5

Also, I tested several other binaries (downloaded manually from the official site) :

• same behavior with the latest Ubuntu(20.04 AND 18.04) distribution BUT the reported version is correct
• with the fedora latest binary, i also have the issue about the CA root, as reported by @shuggy999
• however, it seems to be working with the 1.4.1 binary for ubuntu 16.04 !

Content of my /opt/cyberghostvpn/ folder :

total 48M
lrwxrwxrwx 1 root root   30 2023-03-12 23:50 cyberghostvpn -> cyberghostvpn-ubuntu1604-1.4.1
-rwxr-xr-x 1 root root   6.7M 2023-03-03 23:37 cyberghostvpn-aur-1.3.5
-rwxr-xr-x 1 root root   8.1M 2023-03-10 12:46 cyberghostvpn-centos-1.4.1
-rwxr-xr-x 1 root root   5.9M 2023-03-12 23:36 cyberghostvpn-fedora-1.4.1
-rwxr-xr-x 1 root root   8.0M 2020-07-27 05:29 cyberghostvpn-mint-1.4.1
-rwx--x--x 1 root root   5.7M 2020-09-11 08:50 cyberghostvpn-ubuntu1604-1.4.1
-rwxr-xr-x 1 root root   7.1M 2023-03-10 11:13 cyberghostvpn-ubuntu1804-1.4.1
-rwxr-xr-x 1 root root   6.7M 2023-03-10 11:15 cyberghostvpn-ubuntu2004-1.4.1
-rwxr-xr-x 1 root root   1.8K 2023-03-03 23:37 update-systemd-resolved

CKSUMs :

1675420200 5934944 cyberghostvpn
3486801012 6976128 cyberghostvpn-aur-1.3.5
2919433521 8452432 cyberghostvpn-centos-1.4.1
734640184 6085072 cyberghostvpn-fedora-1.4.1
3348458643 8289696 cyberghostvpn-mint-1.4.1
1675420200 5934944 cyberghostvpn-ubuntu1604-1.4.1
1145629769 7350408 cyberghostvpn-ubuntu1804-1.4.1
329145804 6976128 cyberghostvpn-ubuntu2004-1.4.1

I found that for the mean time you can use the --wireguard argument that will use wireguard rather than openvpn and it seems to work well

I've also has issues connecting recently, I get "Connecting ... An error occured! The VPN connection failed!" Maybe it has something to do with the openvpn update recently. Not sure whether that's a red-herring or not though.

Please may someone help?

Whenever I try to connect to a server, it will complain about Root Certificates.

[shuggy@shuggy-pc ~]$ sudo cyberghostvpn --streaming "channel 4" --connect [sudo] password for shuggy: Prepare OpenVPN connection ... Select server ... london-s416-i11 Connecting ... The "CA" certificate is missing! Downloading configuration ... [shuggy@shuggy-pc ~]$

For everyone who is curious why the sha256sums of a file suddenly differs though the version did not change:

I searched for the original zip file matching to the old sha256 hash (found it here: http://ns360781.ip-91-121-165.eu/downloads/cyberghostvpn-ubuntu-20.04-1.3.4.zip ) and compared the src dirs after running makepkg on the old version 1.4.3-3 and the new one 1.4.3-4:

Result was this:

$ diff -r cyberghostvpn_1.3.4-3/src/ cyberghostvpn_1.3.4-4/src/
diff -r cyberghostvpn_1.3.4-3/src/cyberghostvpn-ubuntu-20.04-1.3.4/install.sh cyberghostvpn_1.3.4-4/src/cyberghostvpn-ubuntu-20.04-1.3.4/install.sh
19,109d18
<   # get GLIBC version
<   glibcVersion=$(ldd --version | grep -i ldd | awk -F' ' {'print $5'})
<   
<   # get distribution version
<   ubuntuDistroVersion=$(lsb_release -sr)
<   distroName=$(lsb_release -a | grep -i "Distributor ID:" | awk -F' ' {'print $3'})
<   distroVersion=$(lsb_release -a | grep -i "Release:" | awk -F' ' {'print $2'})   
< 
<   echo "Checking if glibc version is compatible"
<   
< 
<   # check if GLIBC version is compatible
<   if [ "$ubuntuDistroVersion" == "16.04" ]; then
<           
<       if [ "$glibcVersion" == "2.23" ] ; then
< 
<           echo "The glibc version is compatible, continue..."
< 
<       else
< 
<           echo "THe glibc version is incompatible, exiting setup..."
<           exit
< 
<       fi
< 
<   elif [ "$ubuntuDistroVersion" == "18.04" ] || [ "$distroName" == "LinuxMint" ]; then
<       
<       if [ "$glibcVersion" == "2.27" ]; then
<       
<           echo "The glibc version is compatible, continue..."
<       
<       else
<       
<           echo "The glibc version is incompatible, exiting setup..."
<           exit
< 
<       fi
< 
<   elif [ "$ubuntuDistroVersion" == "19.10" ]; then
< 
<       if [ "$glibcVersion" == "2.30" ]; then
< 
<           echo "The glibc version is compatible, continue..."
< 
<       else
< 
<           echo "The glibc version is incompatible, exiting setup..."
<           exit
<       fi
< 
<   elif [ "$distroName" == "Kali" ] || [ "$ubuntuDistroVersion" == "19.04" ] || [ "$ubuntuDistroVersion" == "20.04" ]; then
< 
<       if [ "$glibcVersion" == "2.29" ] || [ "$glibcVersion" == "2.31" ] || [ "$glibcVersion" == "2.30" ]; then
< 
<           echo "The glibc version is compatible, continue..."
<       
<       else
< 
<           echo "The glibc version is incompatible, exiting setup..."
<           exit
<       
<       fi
< 
<   elif [ "$distroName" == "Linuxmint" ] && [ "$distroVersion" == "20" ]; then
<       
<       if [ "$glibcVersion" == "2.31" ]; then
<           echo "The glibc version is compatible, continue..."
<       else
<           echo "The glibc version is incompatible, exiting setup..."
<           exit
<       fi
< 
<   else
< 
<       echo "Couldn't detect a valid version of your distribution."
<       echo "Make sure you have downloaded the correct install package for your distribution"
<       echo "Note: We support only the following distributions for Debian based OS:"
<       echo ""
<       echo "-Ubuntu 16.04 "
<       echo "-Ubuntu 18.04 "
<       echo "-Ubuntu 19.04 "
<       echo "-Ubuntu 19.10 "
<       echo "-Ubuntu 20.04 "
<       echo "-Linux Mint 19.2 "
<       echo "-Linux Mint 20"
<       echo "-PopOS 19.10 "
<       echo "-Kali 2019/2020 (glibc version should be 2.29/2.30/2.31 in order to work) "
<       exit
< 
<   fi          
< 
Binary files cyberghostvpn_1.3.4-3/src/cyberghostvpn-ubuntu-20.04-1.3.4.zip and cyberghostvpn_1.3.4-4/src/cyberghostvpn-ubuntu-20.04-1.3.4.zip differ

==> Validating source files with sha256sums...
cyberghostvpn-ubuntu-20.04-1.3.4.zip ... FAILED

(fixed)

after reinstall seems to work for me

selecting a server with --countrycode and connecting a number of the list with --connect

Package works great. Thank you so much for maintaining this service!

Just installed and it worked for me. Thank you for creating this, the official company doesn't even provide this.