@Cavsfan - same error that I got. Check the .conf in /etc/openvpn that you use. Make sure it's udp, port 1198, sha1, aes-128-cbc, 2048 for the pem and crt.
That's what fixed the error in dev for me.
I checked these settings by downloading the ovpns from the pia site - Support/Client Download and Support/EASY Setup Guides.. (bottom of page)/Advanced OpoenVPN SSL Usage Guides/OpenVPN Configuration Files (Recommended Defaults) and making sure that was the same as the .conf in /etc/openvpn.
Looks like you've got port 80 in the .conf, like I did, when port 1198 is what works.
Search Criteria
Package Details: private-internet-access-vpn 3.4-3
Package Actions
Git Clone URL: | https://aur.archlinux.org/private-internet-access-vpn.git (read-only, click to copy) |
---|---|
Package Base: | private-internet-access-vpn |
Description: | Installs VPN profiles for Private Internet Access Service |
Upstream URL: | https://www.privateinternetaccess.com/ |
Keywords: | connman networkmanager openvpn python vpn |
Licenses: | GPL |
Conflicts: | xawtv |
Submitter: | flamusdiu |
Maintainer: | Auerhuhn |
Last Packager: | Auerhuhn |
Votes: | 86 |
Popularity: | 0.000008 |
First Submitted: | 2014-08-14 01:22 (UTC) |
Last Updated: | 2024-04-14 17:12 (UTC) |
Dependencies (10)
- openvpn (openvpn-gitAUR, openvpn-mbedtlsAUR)
- python (python37AUR, python311AUR, python310AUR)
- python-docopt
- python-setuptools
- git (git-gitAUR, git-glAUR) (make)
- python-build (make)
- python-installer (python-installer-gitAUR) (make)
- python-wheel (make)
- connman (connman-gitAUR, connman-systemd-resolvedAUR) (optional) – Enables PIA for Connman
- networkmanager (networkmanager-gitAUR, networkmanager-iwdAUR) (optional) – Enables PIA for Network Manager (needs a openvpn plugin)
Required by (0)
Sources (9)
Latest Comments
« First ‹ Previous 1 .. 23 24 25 26 27 28 29 30 31 32 33 .. 48 Next › Last »
kleshas commented on 2016-09-27 23:46 (UTC) (edited on 2016-09-27 23:47 (UTC) by kleshas)
Cavsfan commented on 2016-09-27 21:52 (UTC)
OK, so I installed the non-dev and tried US east with non-strong and it could not connect. I have this alias: alias east='sudo openvpn --config /etc/openvpn/US_East.conf'
I get this error over and over again:
$ east
Tue Sep 27 17:42:57 2016 OpenVPN 2.3.12 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Aug 24 2016
Tue Sep 27 17:42:57 2016 library versions: OpenSSL 1.0.2i 22 Sep 2016, LZO 2.09
Tue Sep 27 17:42:57 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Sep 27 17:42:57 2016 Attempting to establish TCP connection with [AF_INET]209.222.18.35:80 [nonblock]
Tue Sep 27 17:42:58 2016 TCP connection established with [AF_INET]209.222.18.35:80
Tue Sep 27 17:42:58 2016 TCPv4_CLIENT link local: [undef]
Tue Sep 27 17:42:58 2016 TCPv4_CLIENT link remote: [AF_INET]209.222.18.35:80
Tue Sep 27 17:42:58 2016 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=secure@privateinternetaccess.com
Tue Sep 27 17:42:58 2016 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Tue Sep 27 17:42:58 2016 TLS_ERROR: BIO read tls_read_plaintext error
Tue Sep 27 17:42:58 2016 TLS Error: TLS object -> incoming plaintext read error
Tue Sep 27 17:42:58 2016 TLS Error: TLS handshake failed
Tue Sep 27 17:42:58 2016 Fatal TLS error (check_tls_errors_co), restarting
Tue Sep 27 17:42:58 2016 SIGUSR1[soft,tls-error] received, process restarting
Tue Sep 27 17:43:03 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Sep 27 17:43:03 2016 Attempting to establish TCP connection with [AF_INET]108.61.68.154:80 [nonblock]
Tue Sep 27 17:43:04 2016 TCP connection established with [AF_INET]108.61.68.154:80
Tue Sep 27 17:43:04 2016 TCPv4_CLIENT link local: [undef]
Tue Sep 27 17:43:04 2016 TCPv4_CLIENT link remote: [AF_INET]108.61.68.154:80
Tue Sep 27 17:43:05 2016 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=US, ST=OH, L=Columbus, O=Private Internet Access, CN=Private Internet Access CA, emailAddress=secure@privateinternetaccess.com
Tue Sep 27 17:43:05 2016 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Tue Sep 27 17:43:05 2016 TLS_ERROR: BIO read tls_read_plaintext error
Tue Sep 27 17:43:05 2016 TLS Error: TLS object -> incoming plaintext read error
Tue Sep 27 17:43:05 2016 TLS Error: TLS handshake failed
Tue Sep 27 17:43:05 2016 Fatal TLS error (check_tls_errors_co), restarting
Tue Sep 27 17:43:05 2016 SIGUSR1[soft,tls-error] received, process restarting
All I know is it worked until I updated it.
Cavsfan commented on 2016-09-27 20:54 (UTC)
I uninstalled the non-dev and installed the dev ran sudo pia -a for all the places I had before and it got about the same error.
Then I ran just sudo pia -a US_West US_East and it did not error but, neither of them worked. They got an error and tried to connect again, got the same error and so on...
Cavsfan commented on 2016-09-27 20:31 (UTC)
I upgraded and get this error:
$ sudo pia -a
Traceback (most recent call last):
File "/usr/bin/pia", line 11, in <module>
load_entry_point('pia==3.0', 'console_scripts', 'pia')()
File "/usr/lib/python3.5/site-packages/pia/command_line.py", line 23, in main
pia.run.run()
File "/usr/lib/python3.5/site-packages/pia/run.py", line 59, in run
[globals()[k]() for k, v in props.commandline.__dict__.items() if
File "/usr/lib/python3.5/site-packages/pia/run.py", line 60, in <listcomp>
not k == 'hosts' and getattr(props.commandline, k, None)]
File "/usr/lib/python3.5/site-packages/pia/run.py", line 104, in auto_configure
app.config(config)
File "/usr/lib/python3.5/site-packages/pia/applications/appstrategy.py", line 86, in config
self.app.config(config_id)
File "/usr/lib/python3.5/site-packages/pia/applications/hooks.py", line 161, in config
"##remote##": ApplicationStrategyOPENVPN.get_remote_address(config_id),
File "/usr/lib/python3.5/site-packages/pia/applications/hooks.py", line 74, in get_remote_address
return [h.fqdn for h in properties.props.pia_hosts_list if h.name == re.sub('_', ' ', config_id)][0]
IndexError: list index out of range
So, It doesn't work any more.
flamusdiu commented on 2016-09-27 18:51 (UTC) (edited on 2016-09-27 18:53 (UTC) by flamusdiu)
I have seen that error message before, but I haven't seen the network crash. I'll run some testing on it then. I will merge the changes tonight from the dev branch to fix the first issue and I will have to see if there is anything about the crashing. Thanks for letting me know.
kleshas commented on 2016-09-27 15:51 (UTC) (edited on 2016-09-27 16:25 (UTC) by kleshas)
@flamusdiu - I definitely ran pia -a, not -r.
I just uninstalled non-dev, and installed -dev. Ran sudo pia -a, and it created the .conf in /etc/openvpn.
Non-strong works fine.
Same error with Strong settings (port 501, using 4096 cert and pem) - after a few seconds of torrenting, I get Authenticate/Decrypt packet error: bad packet ID and the network stack crashes. Everything is fine when browsing. I suspect this error is nothing to do with the AUR package, rather PIA itself.
I'll stick with non-strong, UDP for now. Thanks for your help.
flamusdiu commented on 2016-09-27 14:06 (UTC)
This is a dev release branch. Stable version is https://aur.archlinux.org/packages/private-internet-access-vpn/
flamusdiu commented on 2016-09-27 12:03 (UTC) (edited on 2016-09-27 12:37 (UTC) by flamusdiu)
@keshas: Were you running 'pia -r' by chance? Apparently, when I added a few other things, I managed to break it which caused it to remove the certifications. Can you try again please?
flamusdiu commented on 2016-09-27 12:02 (UTC)
@Hydeh: that's using the Ubuntu based install provided by PIA. More information about this package can be read from the Wiki: https://wiki.archlinux.org/index.php/Private_Internet_Access_VPN
apt-get commands are normally not handled by Arch. Although is possible to get apt-get to work, it's not recommended to run both apt-get and pacman.
As for the two packages: libxss1 => libxss (which you can install using pacman -S) and libappindicator is on AUR => https://aur.archlinux.org/packages/?O=0&SeB=nd&K=libappindicator&outdated=&SB=n&SO=a&PP=50&do_Search=Go
Hydeh commented on 2016-09-27 07:05 (UTC)
Hi, have an issue with installing pia on an arch distro when I type ./pia-64v-installer.sh into the terminal it gives me this result,
Extracting files...
Installing dependencies...
Running: sudo apt-get install -y libxss1 libappindicator1
sudo: apt-get: command not found
Installation complete!
Is there anyway to solve the (apt-get install -y libxss1 libappindicator1) without using the apt-get? I tried using pacman -S but had no luck there.
Thanks.
Pinned Comments
Auerhuhn commented on 2023-10-27 08:23 (UTC) (edited on 2023-10-27 08:23 (UTC) by Auerhuhn)
Note that this package provides only VPN profiles but not the vendor’s software.
The package version refers to the
python-pia
tool by @flamusdiu, which may lag behind the vendor’s own VPN software version.Please do not flag this package out-of-date unless @flamusdiu releases a new stable
python-pia
version.Thank you!