Arch Linux User Repository

Info from expressvpn's site ...

wget https://www.expressvpn.com/expressvpn_release_public_key_0xAFF2A1415F6A3A38.asc

gpg --import expressvpn_release_public_key_0xAFF2A1415F6A3A38.asc

All installed fine; thank you very much for maintaining.

Looks like update notifications are working for the linux client now, but unfortunately the current version (2.3.2) thinks it's an older version (2.3.1 -- check expressvpn --version), so the update alert people get when they run expressvpn status may be a false positive.

Please check what version is reported at https://www.expressvpn.com/latest (or https://www.expressvpn.com/support/troubleshooting/china-status/#linux as this sometimes gets updates listed sooner) before flagging the package as out-of-date.

Please note that, from v2.0.0, ExpressVPN will be providing signed Arch packages on their website (alongside the deb and rpm packages). I'll be continuing to update this package, but for those that find using the AUR cumbersome or just don't want to wait, please be aware of this option.

EDIT: packages were delayed for testing, but seem to be live as of 2019-01-23.

.deb is historical, .pkg. files weren't provided at the time of this package's creation, and since we only use the contents of the archive the format from upstream is unimportant. Also upstream no longer provides 32-bit Arch archives.

As for the expressvpn.xyz domain, that's where the archives were provided by expressvpn up until the latest version, which I've only just made aware of (apparently the new version alerts are broken again on Linux, and nobody flagged OOD). Package update coming shortly. Package security comes from the PGP signature checking. So long as you check the signature matches the PGP key used by upstream (defined in validpgpkeys), you can validate that the archives are official.

Why sources are from expressvpn.xyz instead of expressvpn.com. And sources are .deb pacakges instead of .pkg.tar.xz ?

The problem with this package is that it interferes with the one installed from signed Arch packages on ExpressVPN website by being named the same way.
AUR updater programs: paru, yay, etc... try to update it even if it has not been installed from AUR.
This package should be removed or renamed.

If anyone else is having the problem where expressvpn disconnect no longer restores your resolv.conf I solved the problem by removing the symlink and rm /var/lib/expressvpn/resolv.conf (not sure if that is needed)

I think that sometimes expressvpn can get into an inconsistent state where the symlink is still there even when expressvpn is not connected.

The official version is 2.6.3.3, no matter whether the Chinese ExpressVPN staff forgot to remove it from their web site... I notified ExpressVPN.

I always protect my resolv.conf by setting the immutable bit (chattr +i), so that no networking software can fiddle with it, be it NetworkManager or expressvpn. The newer expressvpn clients now exit with an error. In previous versions the clients connected without aborting. That's the change.

Interesting, very mixed messages coming from expressVPN then -- the china-status page still lists 2.6.4.5 as the latest version, and it is still downloadable.

The old PKGBUILD is still accessible if you want to downgrade to 2.6.3.3: https://aur.archlinux.org/cgit/aur.git/tree/?h=expressvpn&id=bb798e4d22d3dd8365035bb6bc99f58b0e5bb602

I've had no issue with the latest version, expressvpn has always taken control of resolv.conf for me.

I received the below information by ExpressVPN:

"In the meantime, as you mentioned you are using the 2.6.4.5 app version on your Arch Linux. If I am not mistaken, this version has been removed.

Kindly use the latest app version for the Linux device which is 2.6.3. You can get it by signing in to your ExpressVPN account page here: https://www.expressvpn.com/sign-in"

Version 2.6.4.5 has been removed. Please revert back to version 2.6.3.3 that can currently be downloaded from their web site as the official version for Linux.

I am experiencing connection problems with German servers with versions 2.6.4.x. Also the new client overwrites my resolv.conf file, which it has never done before. My resolv.conf is protected and the client exists with an error as it can't overwrite. I told them that this is not OK for me, reply pending.

Ah @Wormzy apologies, you are correct. It seems that this occurs after installing blackarch. Yet another issue with that package which will undoubtedly be promptly ignored.

Thanks mate, apologies again for the misinformation.

Medicineman25, your system is very broken if your /usr/sbin is not a symlink to /usr/bin. Also, this package installs the service to /usr/lib/systemd/system/expressvpn.service, you don't need to copy it to /etc/systemd/system.