[Solved] Eduroam: unable to connect

[Codalunga 0]

Hi everyone

I'm unable to connect via airVPN with the wi-fi of my university, eduroam. I'm on a Ubuntu 14.04 machine with airVPN client 2.10. I'm connected to eduroam (PEAP, no certificate, MSCHAPv2), the airVPN client CAN connect to a server, but it's unable to complete the operation and it gets stuck on "checking route". Here's the log:

 

 

I 2015.09.17 13:49:54 - AirVPN client version: 2.10.3 / x64, System: Linux, Name: Ubuntu 14.04.3 LTS \n \l / x64

. 2015.09.17 13:49:54 - Reading options from /home/codalunga/.airvpn/AirVPN.xml

. 2015.09.17 13:49:55 - Data Path: /home/codalunga/.airvpn

. 2015.09.17 13:49:55 - App Path: /usr/lib/AirVPN

. 2015.09.17 13:49:55 - Executable Path: /usr/lib/AirVPN/AirVPN.exe

. 2015.09.17 13:49:55 - Command line arguments (1): path="/home/codalunga/.airvpn"

. 2015.09.17 13:49:55 - Updating systems & servers data ...

. 2015.09.17 13:49:55 - Operating System: Unix 3.19.0.28 - Linux codalunga-Lenovo-G500 3.19.0-28-generic #30~14.04.1-Ubuntu SMP Tue Sep 1 09:32:55 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

I 2015.09.17 13:49:55 - OpenVPN Driver - Found, /dev/net/tun

I 2015.09.17 13:49:55 - OpenVPN - Version: OpenVPN 2.3.2 (/usr/sbin/openvpn)

I 2015.09.17 13:49:55 - SSH - Version: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3, OpenSSL 1.0.1f 6 Jan 2014 (/usr/bin/ssh)

I 2015.09.17 13:49:55 - SSL - Version: stunnel 4.53 (/usr/bin/stunnel4)

! 2015.09.17 13:49:55 - Activation of Network Lock - Linux IPTables

. 2015.09.17 13:49:57 - Systems & servers data update completed

I 2015.09.17 13:49:57 - Session starting.

W 2015.09.17 13:49:57 - Unable to understand if IPV6 is active.

I 2015.09.17 13:50:01 - Checking authorization ...

! 2015.09.17 13:50:03 - Connecting to Pherkad (Sweden, Uppsala)

. 2015.09.17 13:50:03 - OpenVPN > OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec  1 2014

. 2015.09.17 13:50:03 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100

. 2015.09.17 13:50:03 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file

. 2015.09.17 13:50:03 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2015.09.17 13:50:03 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2015.09.17 13:50:03 - OpenVPN > Socket Buffers: R=[87380->262144] S=[16384->262144]

. 2015.09.17 13:50:03 - OpenVPN > Attempting to establish TCP connection with [AF_INET]62.102.148.134:443 [nonblock]

. 2015.09.17 13:50:04 - OpenVPN > TCP connection established with [AF_INET]62.102.148.134:443

. 2015.09.17 13:50:04 - OpenVPN > TCPv4_CLIENT link local: [undef]

. 2015.09.17 13:50:04 - OpenVPN > TCPv4_CLIENT link remote: [AF_INET]62.102.148.134:443

. 2015.09.17 13:50:04 - OpenVPN > TLS: Initial packet from [AF_INET]62.102.148.134:443, sid=bfb48035 48f4f50d

. 2015.09.17 13:50:05 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

. 2015.09.17 13:50:05 - OpenVPN > Validating certificate key usage

. 2015.09.17 13:50:05 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0

. 2015.09.17 13:50:05 - OpenVPN > VERIFY KU OK

. 2015.09.17 13:50:05 - OpenVPN > Validating certificate extended key usage

. 2015.09.17 13:50:05 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

. 2015.09.17 13:50:05 - OpenVPN > VERIFY EKU OK

. 2015.09.17 13:50:05 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

. 2015.09.17 13:50:07 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2015.09.17 13:50:07 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2015.09.17 13:50:07 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2015.09.17 13:50:07 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2015.09.17 13:50:07 - OpenVPN > Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA

. 2015.09.17 13:50:07 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]62.102.148.134:443

. 2015.09.17 13:50:09 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

. 2015.09.17 13:50:10 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.1.211 255.255.0.0'

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: LZO parms modified

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: route options modified

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: route-related options modified

. 2015.09.17 13:50:10 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

. 2015.09.17 13:50:10 - OpenVPN > ROUTE_GATEWAY 159.149.232.1/255.255.252.0 IFACE=wlan0 HWADDR=1c:3e:84:ed:06:13

. 2015.09.17 13:50:10 - OpenVPN > TUN/TAP device tun0 opened

. 2015.09.17 13:50:10 - OpenVPN > TUN/TAP TX queue length set to 100

. 2015.09.17 13:50:10 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

. 2015.09.17 13:50:10 - OpenVPN > /sbin/ip link set dev tun0 up mtu 1500

. 2015.09.17 13:50:10 - OpenVPN > /sbin/ip addr add dev tun0 10.5.1.211/16 broadcast 10.5.255.255

. 2015.09.17 13:50:15 - OpenVPN > /sbin/ip route add 62.102.148.134/32 via 159.149.232.1

. 2015.09.17 13:50:15 - OpenVPN > /sbin/ip route add 0.0.0.0/1 via 10.5.0.1

. 2015.09.17 13:50:15 - OpenVPN > /sbin/ip route add 128.0.0.0/1 via 10.5.0.1

. 2015.09.17 13:50:15 - Starting Management Interface

. 2015.09.17 13:50:15 - OpenVPN > Initialization Sequence Completed

I 2015.09.17 13:50:15 - /etc/resolv.conf renamed to /etc/resolv.conf.airvpn as backup

I 2015.09.17 13:50:15 - DNS of the system updated to VPN DNS (Rename method: /etc/resolv.conf generated)

I 2015.09.17 13:50:15 - Flushing DNS

I 2015.09.17 13:50:15 - Checking route

W 2015.09.17 13:51:06 - The request timed out

! 2015.09.17 13:51:06 - Disconnecting

 

 

Any ideas? This happens both with resolvconf as well as with renaming the DNS. Thanks for your help! 

EDIT: quick update. I managed to connect via SSL Tunnel, no issues so far!