How do I connect to Private Internet Access?

5 Antworten [Letzter Beitrag]
calher

I am a member!

Offline
Beigetreten: 06/19/2015

The official PIA client is not yet free/libre software.

https://www.privateinternetaccess.com/helpdesk/news/posts/upcoming-changes-february-2019

So, I looked to other means. Someone in #privateinternetaccess on
freenode mentioned the Ubuntu OpenVPN tutorial. I tried that, but even
though it got me connected to PIA, I could not ping anything or load any
basic sites.

https://www.privateinternetaccess.com/helpdesk/guides/linux/linux/ubuntu-openvpn-setup

Also, pia-nm.sh has no license, which means it is proprietary software.
I told someone about it, but it may help if more people ask nicely for a
license to be added to the script, since it falls under copyright law. I
recommended the GNU All-Permissive License for its brevity and simplicity.

That said, I still ran the script. I'm sure the lack of a license header
on such a simple script was merely an accident.

https://www.gnu.org/licenses/license-list.en.html#GNUAllPermissive

Right now, I have an unprotected connection. Network Manager is all
gray, as if I'm not connected at all or have a very low signal. How can
I get connected to PIA without losing my connection?

calher

I am a member!

Offline
Beigetreten: 06/19/2015

Also, here's my log --


Script started on Fri 26 Apr 2019 12:31:51 AM CDT
$ sudo journalctl -fu NetworkManager.service
[sudo] password for cal:
-- Logs begin at Thu 2019-04-25 23:48:22 CDT. --
Apr 25 23:48:38 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 1030ms.
Apr 25 23:48:39 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 2050ms.
Apr 25 23:48:41 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 4270ms.
Apr 25 23:48:46 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 8370ms.
Apr 25 23:48:54 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 15940ms.
Apr 25 23:49:10 potato dhclient[1807]: XMT: Info-Request on wlp2s0,
interval 33250ms.
Apr 25 23:49:23 potato NetworkManager[806]: 
[1556254163.3771] dhcp6 (wlp2s0): request timed out
Apr 25 23:49:23 potato NetworkManager[806]: [1556254163.3773]
dhcp6 (wlp2s0): state changed unknown -> timeout
Apr 25 23:49:23 potato NetworkManager[806]: [1556254163.3801]
dhcp6 (wlp2s0): canceled DHCP transaction, DHCP client pid 1807
Apr 25 23:49:23 potato NetworkManager[806]: [1556254163.3803]
dhcp6 (wlp2s0): state changed timeout -> done
### Now doing "VPN _ Connections" -> [x] PIA - CA Toronto ###
Apr 26 00:35:34 potato NetworkManager[806]: [1556256934.6334]
audit: op="connection-activate"
uuid="948077d5-b556-4064-976a-d7296ba9b59d" name="PIA - CA Toronto"
pid=1141 uid=1000 result="success"
Apr 26 00:35:34 potato NetworkManager[806]: [1556256934.6676]
vpn-connection[0x223f1d0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: Started the VPN service, PID 6982
Apr 26 00:35:34 potato NetworkManager[806]: [1556256934.7078]
vpn-connection[0x223f1d0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: Saw the service appear; activating connection
Apr 26 00:35:59 potato NetworkManager[806]: 
[1556256959.9991]
vpn-connection[0x223f1d0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: Failed to request VPN secrets #3: No agents were available
for this request.
### Entered PIA account w password. ###
### No connection. Retrying. ###
Apr 26 00:37:42 potato NetworkManager[806]: [1556257062.3747]
audit: op="connection-activate"
uuid="948077d5-b556-4064-976a-d7296ba9b59d" name="PIA - CA Toronto"
pid=1141 uid=1000 result="success"
Apr 26 00:37:42 potato NetworkManager[806]: [1556257062.3875]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: Started the VPN service, PID 7139
Apr 26 00:37:42 potato NetworkManager[806]: [1556257062.4136]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: Saw the service appear; activating connection
Apr 26 00:37:42 potato NetworkManager[806]: nm-openvpn-Message:
openvpn[7145] started
Apr 26 00:37:42 potato NetworkManager[806]: [1556257062.7367]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: VPN plugin: state changed: starting (3)
Apr 26 00:37:42 potato NetworkManager[806]: [1556257062.7378]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: VPN connection: (ConnectInteractive) reply received
Apr 26 00:37:42 potato nm-openvpn[7145]: OpenVPN 2.3.10
x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6]
built on Jun 22 2017
Apr 26 00:37:42 potato nm-openvpn[7145]: library versions:
OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Apr 26 00:37:42 potato nm-openvpn[7145]: WARNING: No server
certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Apr 26 00:37:42 potato nm-openvpn[7145]: NOTE: the current
--script-security setting may allow this configuration to call
user-defined scripts
Apr 26 00:37:43 potato nm-openvpn[7145]: NOTE: chroot will be
delayed because of --client, --pull, or --up-delay
Apr 26 00:37:43 potato nm-openvpn[7145]: NOTE: UID/GID
downgrade will be delayed because of --client, --pull, or --up-delay
Apr 26 00:37:43 potato nm-openvpn[7145]: UDPv4 link local:
[undef]
Apr 26 00:37:43 potato nm-openvpn[7145]: UDPv4 link remote:
[AF_INET]172.98.67.41:1197
Apr 26 00:37:43 potato nm-openvpn[7145]: WARNING: 'link-mtu' is
used inconsistently, local='link-mtu 1569', remote='link-mtu 1542'
Apr 26 00:37:43 potato nm-openvpn[7145]: WARNING: 'cipher' is
used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
Apr 26 00:37:43 potato nm-openvpn[7145]: WARNING: 'auth' is
used inconsistently, local='auth SHA256', remote='auth SHA1'
Apr 26 00:37:43 potato nm-openvpn[7145]: WARNING: 'keysize' is
used inconsistently, local='keysize 256', remote='keysize 128'
Apr 26 00:37:43 potato nm-openvpn[7145]: WARNING: 'comp-lzo' is
present in remote config but missing in local config, remote='comp-lzo'
Apr 26 00:37:43 potato nm-openvpn[7145]:
[5f2d76bec334993911ead2379ec24b00] Peer Connection Initiated
with [AF_INET]172.98.67.41:1197
Apr 26 00:37:45 potato nm-openvpn[7145]: TUN/TAP device tun0
opened
Apr 26 00:37:45 potato nm-openvpn[7145]:
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper
--bus-name org.freedesktop.NetworkManager.openvpn.Connection_2 --tun --
tun0 1500 1569 10.49.10.6 10.49.10.5 init
Apr 26 00:37:45 potato NetworkManager[806]: [1556257065.9994]
manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/2)
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0391]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",0]: VPN connection: (IP Config Get) reply received.
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0504]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: VPN connection: (IP4 Config Get) reply received
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0526]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: VPN Gateway: 172.98.67.41
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0527]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Tunnel Device: tun0
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0527]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: IPv4 configuration:
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0528]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal Gateway: 10.49.10.5
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0528]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal Address: 10.49.10.6
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0529]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal Prefix: 32
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0529]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal Point-to-Point Address: 10.49.10.5
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0536]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Maximum Segment Size (MSS): 0
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0537]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Static Route: 10.49.10.1/32 Next Hop:
10.49.10.5
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0537]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Forbid Default Route: no
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0537]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal DNS: 209.222.18.222
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0538]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: Internal DNS: 209.222.18.218
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0538]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: DNS Domain: '(none)'
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0539]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: Data: No IPv6 configuration
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0540]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: VPN plugin: state changed: started (4)
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.0577]
vpn-connection[0x223f3c0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA
Toronto",3:(tun0)]: VPN connection: (IP Config Get) complete
Apr 26 00:37:46 potato nm-openvpn[7145]: chroot to
'/var/lib/openvpn/chroot' and cd to '/' succeeded
Apr 26 00:37:46 potato nm-openvpn[7145]: GID set to nm-openvpn
Apr 26 00:37:46 potato nm-openvpn[7145]: UID set to nm-openvpn
Apr 26 00:37:46 potato nm-openvpn[7145]: Initialization
Sequence Completed
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.1064]
manager: NetworkManager state is now CONNECTED_LOCAL
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.1066]
manager: NetworkManager state is now CONNECTED_GLOBAL
Apr 26 00:37:46 potato NetworkManager[806]: [1556257066.1069]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 00:37:55 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.4427]
devices added (path: /sys/devices/virtual/net/tun0, iface: tun0)
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.4436]
device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no
ifupdown configuration found.
Apr 26 00:38:00 potato NetworkManager[806]: 
[1556257080.4465] device (wlp2s0): activation-stage: schedule
activate_stage5_ip6_config_commit,10 which replaces
activate_stage5_ip6_config_commit,10 (id 7095 -> 7096)
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.4604]
device (tun0): state change: unmanaged -> unavailable (reason
'connection-assumed') [10 20 41]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.4778]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5074]
keyfile: add connection in-memory
(54d6e080-e95e-40cd-83e4-fc77b87a7ada,"tun0")
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5268]
device (tun0): state change: unavailable -> disconnected (reason
'connection-assumed') [20 30 41]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5302]
device (tun0): Activation: starting connection 'tun0'
(54d6e080-e95e-40cd-83e4-fc77b87a7ada)
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5325]
device (tun0): state change: disconnected -> prepare (reason 'none') [30
40 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5366]
device (tun0): state change: prepare -> config (reason 'none') [40 50 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5376]
device (tun0): state change: config -> ip-config (reason 'none') [50 70 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5384]
device (tun0): state change: ip-config -> ip-check (reason 'none') [70 80 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5405]
device (tun0): state change: ip-check -> secondaries (reason 'none') [80
90 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5423]
device (tun0): state change: secondaries -> activated (reason 'none')
[90 100 0]
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5466]
manager: NetworkManager state is now CONNECTED_LOCAL
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5468]
manager: NetworkManager state is now CONNECTED_GLOBAL
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5470]
policy: set 'tun0' (tun0) as default for IPv4 routing and DNS
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5473]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 00:38:00 potato NetworkManager[806]: [1556257080.5696]
device (tun0): Activation: successful, device activated.
Apr 26 00:38:05 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:15 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:25 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:35 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:45 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:38:56 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:39:06 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
### NetworkManager icon is gray with lock. ###
Apr 26 00:39:16 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:39:26 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:39:36 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:39:46 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:39:56 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:40:06 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:40:16 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:40:26 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
### "ping google.com" hangs. ###Apr 26 00:40:36 potato
nm-openvpn[7145]: write to TUN/TAP : Invalid argument (code=22)
Apr 26 00:40:46 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:40:56 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:41:06 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
$ ping google.com
ping: unknown host google.com
Apr 26 00:41:16 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:41:26 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
Apr 26 00:41:36 potato nm-openvpn[7145]: write to TUN/TAP :
Invalid argument (code=22)
^C
$ exit

Script done on Fri 26 Apr 2019 12:41:48 AM CDT

The actual file in base64, in case whitespace or non-ASCII characters
were corrupted by my email client --

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And its sha256sum --


abe71bd1590634d5e8f7c02e391b5df9ae4bc7b5bd7ff6e5b12c43d9d8586211 typescript

I hope this helps diagnose the problem.

calher

I am a member!

Offline
Beigetreten: 06/19/2015

Max-P on #privateinternetaccess (freenode) said

That's weird, it seems to be failing doing IO on the VPN adapter

try these:

sudo sed s/comp-lzo=no/comp-lzo=yes/ -i
/etc/NetworkManager/system-connections/PIA*
sudo nmcli conn reload

Then you can try reconnecting otherwise you might need to update
OpenVPN, 2.3 is pretty ancient

I entered the commands. So far, so good!

$ sudo sed s/comp-lzo=no/comp-lzo=yes/ -i
/etc/NetworkManager/system-connections/PIA*
[sudo] password for cal:
$ sudo nmcli conn reload
$ exit

Now, I do as I'm told, to try reconnecting again. I keep another log,
just in case.

Script started on Fri 26 Apr 2019 01:13:24 AM CDT
$ sudo journalctl -fu NetworkManager.service
[sudo] password for cal:
-- Logs begin at Thu 2019-04-25 23:48:22 CDT. --
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.8042]
keyfile: update /etc/NetworkManager/system-connections/PIA - AU Sydney
(ce6a8e07-345b-4fd3-a7ea-fec694fda763,"PIA - AU Sydney")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.8249]
keyfile: update /etc/NetworkManager/system-connections/PIA - Austria
(b5fd6341-af0e-4a90-8790-b80eb52fb281,"PIA - Austria")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.8457]
keyfile: update /etc/NetworkManager/system-connections/PIA - Belgium
(31496633-10a0-499f-b8e0-4a3312000135,"PIA - Belgium")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.8664]
keyfile: update /etc/NetworkManager/system-connections/PIA - Brazil
(55a1aa48-57f3-4473-b3a5-b45304bfe8ea,"PIA - Brazil")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.8872]
keyfile: update /etc/NetworkManager/system-connections/PIA - CA
Montreal (200b492c-8ee1-4231-b8c4-c2c05fff1bd2,"PIA - CA Montreal")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.9078]
keyfile: update /etc/NetworkManager/system-connections/PIA - CA
Toronto (948077d5-b556-4064-976a-d7296ba9b59d,"PIA - CA Toronto")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.9287]
keyfile: update /etc/NetworkManager/system-connections/PIA - CA
Vancouver (048cda37-c906-40c2-8afa-e746c034f857,"PIA - CA Vancouver")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.9499]
keyfile: update /etc/NetworkManager/system-connections/PIA - Czech
Republic (35f3061a-926d-4845-bbc5-950f39430483,"PIA - Czech Republic")
Apr 26 01:09:47 potato NetworkManager[806]: [1556258987.9708]
keyfile: update /etc/NetworkManager/system-connections/PIA - DE Berlin
(2d844c22-38bd-4afb-a4d5-93e0a5e2d64e,"PIA - DE Berlin")
Apr 26 01:09:48 potato NetworkManager[806]: [1556258988.1384]
keyfile: update /etc/NetworkManager/system-connections/Fairpoint7FFC 1
(91a6330f-3717-4013-b563-b5a3a46ab04d,"Fairpoint7FFC 1")
### Trying NetworkManager -> VPN Connections -> PIA - CA Toronto ###
Apr 26 01:17:37 potato NetworkManager[806]: [1556259457.1394]
audit: op="connection-activate"
uuid="948077d5-b556-4064-976a-d7296ba9b59d" name="PIA - CA Toronto"
pid=1141 uid=1000 result="success"
Apr 26 01:17:37 potato NetworkManager[806]: [1556259457.1571]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",0]: Started the VPN service, PID 10655
Apr 26 01:17:37 potato NetworkManager[806]: [1556259457.1803]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",0]: Saw the service appear; activating connection
Apr 26 01:17:37 potato NetworkManager[806]: nm-openvpn-Message:
openvpn[10662] started
Apr 26 01:17:37 potato NetworkManager[806]: [1556259457.4355]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",0]: VPN plugin: state changed: starting (3)
Apr 26 01:17:37 potato NetworkManager[806]: [1556259457.4356]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",0]: VPN connection: (ConnectInteractive) reply received
Apr 26 01:17:37 potato nm-openvpn[10662]: OpenVPN 2.3.10
x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6]
built on Jun 22 2017
Apr 26 01:17:37 potato nm-openvpn[10662]: library versions:
OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Apr 26 01:17:37 potato nm-openvpn[10662]: WARNING: No server
certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Apr 26 01:17:37 potato nm-openvpn[10662]: NOTE: the current
--script-security setting may allow this configuration to call
user-defined scripts
Apr 26 01:17:37 potato nm-openvpn[10662]: NOTE: chroot will
be delayed because of --client, --pull, or --up-delay
Apr 26 01:17:37 potato nm-openvpn[10662]: NOTE: UID/GID
downgrade will be delayed because of --client, --pull, or --up-delay
Apr 26 01:17:37 potato nm-openvpn[10662]: UDPv4 link local:
[undef]
Apr 26 01:17:37 potato nm-openvpn[10662]: UDPv4 link
remote: [AF_INET]172.98.67.94:1197
Apr 26 01:17:38 potato nm-openvpn[10662]: WARNING: 'link-mtu'
is used inconsistently, local='link-mtu 1570', remote='link-mtu 1542'
Apr 26 01:17:38 potato nm-openvpn[10662]: WARNING: 'cipher'
is used inconsistently, local='cipher AES-256-CBC', remote='cipher
BF-CBC'
Apr 26 01:17:38 potato nm-openvpn[10662]: WARNING: 'auth' is
used inconsistently, local='auth SHA256', remote='auth SHA1'
Apr 26 01:17:38 potato nm-openvpn[10662]: WARNING: 'keysize'
is used inconsistently, local='keysize 256', remote='keysize 128'
Apr 26 01:17:38 potato nm-openvpn[10662]:
[360f7c9b2337f5e1e2d12cc7c84b6a7a] Peer Connection Initiated
with [AF_INET]172.98.67.94:1197
Apr 26 01:17:40 potato nm-openvpn[10662]: TUN/TAP device
tun0 opened
Apr 26 01:17:40 potato nm-openvpn[10662]:
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper
--bus-name org.freedesktop.NetworkManager.openvpn.Connection_4 --tun
-- tun0 1500 1570 10.28.10.6 10.28.10.5 init
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.5498]
manager: (tun0): new Tun device
(/org/freedesktop/NetworkManager/Devices/3)
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.5852]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",0]: VPN connection: (IP Config Get) reply received.
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.5926]
devices added (path: /sys/devices/virtual/net/tun0, iface: tun0)
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.5927]
device added (path: /sys/devices/virtual/net/tun0, iface: tun0): no
ifupdown configuration found.
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.5988]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: VPN connection: (IP4 Config Get) reply received
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6012]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: VPN Gateway: 172.98.67.94
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6013]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Tunnel Device: tun0
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6013]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: IPv4 configuration:
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6014]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal Gateway: 10.28.10.5
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6014]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal Address: 10.28.10.6
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6015]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal Prefix: 32
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6015]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal Point-to-Point Address: 10.28.10.5
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6015]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Maximum Segment Size (MSS): 0
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6016]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Static Route: 10.28.10.1/32 Next Hop:
10.28.10.5
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6016]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Forbid Default Route: no
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6016]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal DNS: 209.222.18.222
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6017]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: Internal DNS: 209.222.18.218
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6017]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: DNS Domain: '(none)'
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6017]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: Data: No IPv6 configuration
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6019]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: VPN plugin: state changed: started (4)
Apr 26 01:17:40 potato nm-openvpn[10662]: chroot to
'/var/lib/openvpn/chroot' and cd to '/' succeeded
Apr 26 01:17:40 potato nm-openvpn[10662]: GID set to
nm-openvpn
Apr 26 01:17:40 potato nm-openvpn[10662]: UID set to
nm-openvpn
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6113]
vpn-connection[0x223f5b0,948077d5-b556-4064-976a-d7296ba9b59d,"PIA -
CA Toronto",4:(tun0)]: VPN connection: (IP Config Get) complete
Apr 26 01:17:40 potato nm-openvpn[10662]: Initialization
Sequence Completed
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6125]
device (tun0): state change: unmanaged -> unavailable (reason
'connection-assumed') [10 20 41]
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6523]
manager: NetworkManager state is now CONNECTED_LOCAL
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6588]
manager: NetworkManager state is now CONNECTED_GLOBAL
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.6609]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.8544]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.9053]
keyfile: add connection in-memory
(5aaac1a0-3402-4d0d-9767-8d20ae7526c4,"tun0")
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.9089]
device (tun0): state change: unavailable -> disconnected (reason
'connection-assumed') [20 30 41]
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.9153]
device (tun0): Activation: starting connection 'tun0'
(5aaac1a0-3402-4d0d-9767-8d20ae7526c4)
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.9194]
dns-mgr: Writing DNS information to /sbin/resolvconf
Apr 26 01:17:40 potato NetworkManager[806]: [1556259460.9939]
device (tun0): state change: disconnected -> prepare (reason 'none')
[30 40 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0029]
device (tun0): state change: prepare -> config (reason 'none') [40 50 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0057]
device (tun0): state change: config -> ip-config (reason 'none') [50 70 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0102]
device (tun0): state change: ip-config -> ip-check (reason 'none') [70
80 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0142]
device (tun0): state change: ip-check -> secondaries (reason 'none')
[80 90 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0217]
device (tun0): state change: secondaries -> activated (reason 'none')
[90 100 0]
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0564]
manager: NetworkManager state is now CONNECTED_LOCAL
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0569]
manager: NetworkManager state is now CONNECTED_GLOBAL
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0572]
policy: set 'tun0' (tun0) as default for IPv4 routing and DNS
Apr 26 01:17:41 potato NetworkManager[806]: [1556259461.0575]
device (tun0): Activation: successful, device activated.

NetworkManager sent a desktop notification saying "Successfully
established." No password needed this time, either!

So, I tested the connection. First, I pinged Google --

$ ping google.com
PING google.com (172.217.0.238) 56(84) bytes of data.
64 bytes from dfw06s38-in-f14.1e100.net (172.217.0.238): icmp_seq=1
ttl=56 time=716 ms
64 bytes from dfw06s38-in-f14.1e100.net (172.217.0.238): icmp_seq=2
ttl=56 time=614 ms
64 bytes from dfw06s38-in-f14.1e100.net (172.217.0.238): icmp_seq=3
ttl=56 time=636 ms
^C
--- google.com ping statistics ---
4 packets transmitted, 3 received, 25% packet loss, time 3641ms
rtt min/avg/max/mdev = 614.238/655.767/716.710/44.033 ms
$

Excellent! And google.com also loaded in Abrowser just fine. It even
said "Canada" in the bottom left corner! This looks good.

Next, I checked wtfismyip.com. It, too, reports that I'm in Canada.

{
"YourFuckingIPAddress": "172.98.67.94",
"YourFuckingLocation": "Toronto, ON, Canada",
"YourFuckingHostname": "172.98.67.94",
"YourFuckingISP": "Total Server Solutions L.L.C.",
"YourFuckingTorExit": "false",
"YourFuckingCountryCode": "CA"
}

Success! I guess I got the help I needed on IRC, after all. I hope
this helps someone!

^C
$ exit

Script done on Fri 26 Apr 2019 01:24:28 AM CDT

Narcis Garcia
Offline
Beigetreten: 04/15/2019

Have in mind that this name, Private Internet Access (PIA), is a
registered trademark of an ISP company; not a protocol or security
convention at all.

El 26/4/19 a les 7:17, Cal ha escrit:
> The official PIA client is not yet free/libre software.
>
> https://www.privateinternetaccess.com/helpdesk/news/posts/upcoming-changes-february-2019
>
> So, I looked to other means. Someone in #privateinternetaccess on
> freenode mentioned the Ubuntu OpenVPN tutorial. I tried that, but even
> though it got me connected to PIA, I could not ping anything or load any
> basic sites.
>
> https://www.privateinternetaccess.com/helpdesk/guides/linux/linux/ubuntu-openvpn-setup
>
> Also, pia-nm.sh has no license, which means it is proprietary software.
> I told someone about it, but it may help if more people ask nicely for a
> license to be added to the script, since it falls under copyright law. I
> recommended the GNU All-Permissive License for its brevity and simplicity.
>
> That said, I still ran the script. I'm sure the lack of a license header
> on such a simple script was merely an accident.
>
> https://www.gnu.org/licenses/license-list.en.html#GNUAllPermissive
>
> Right now, I have an unprotected connection. Network Manager is all
> gray, as if I'm not connected at all or have a very low signal. How can
> I get connected to PIA without losing my connection?
>
>

freeatlast

I am a member!

Offline
Beigetreten: 07/21/2018

while private internet access donates to the free software foundation thier client software is still propritary unless you use thier firefox addon or Manuel openvpn setup

strypey
Offline
Beigetreten: 05/14/2015

I saw a recent blog post about a partnership between Purism and PIA:
https://puri.sm/posts/purism-becomes-pia-first-oem-partner/

... which suggests that the free code Librem Tunnel app (a branded OpenVPN client) will be a way to connect to a PIA-supplied VPN service, without using non-free software, or having to fuss around with manual config. So far, I can only find mobile versions of the Tunnel app and I haven't got it working with either of the Androids I have (4.4.2 and 4.4.4). It just crashes on both, as soon as it's opened.