Jump to content
Not connected, Your IP: 18.188.227.64
AirVPN
Sign in to follow this  
Followers 0
R8T3D

Unable to use AirVPN on heavily firewalled wifi

By R8T3D, ... in Troubleshooting and Problems

Recommended Posts

R8T3D    1

R8T3D
Posted ...

Hello! I have been using AirVPN at home like a charm for months now, however when I am on a certain network away from my house I cannot seem to get it to work. When I use all of the non-SSL and SSH protocols, it fails to connect. When I use SSL or SSH I get an error in my logs:

 

"Squid does not support some access protocols. For example, the SSH protocol is currently not supported."

 

How can I fix this so I can use SSL or SSH?

Share this post

Link to post

zhang888    1066

zhang888
Posted ...

Squid is an HTTP/HTTPS based proxy, so in some configurations an SSL tunnel can work.

Squid is mostly used to ensure a fair bandwidth sharing in busy places, such as Airports, to

ensure that clients only (ab)use the minimal required resources in order to keep the network unsaturated.

 

An SSL tunnel should work in most cases, unless you cannot use HTTPS websites from this network, which

makes it very limited by itself and not compatible with 2017 web standards.

Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.

Share this post

Link to post

R8T3D    1

R8T3D
Posted ...

Squid is an HTTP/HTTPS based proxy, so in some configurations an SSL tunnel can work.

Squid is mostly used to ensure a fair bandwidth sharing in busy places, such as Airports, to

ensure that clients only (ab)use the minimal required resources in order to keep the network unsaturated.

 

An SSL tunnel should work in most cases, unless you cannot use HTTPS websites from this network, which

makes it very limited by itself and not compatible with 2017 web standards.

 

Sorry for such a late response, I tried SSL and it still fails to connect, everything works well and then it gives me this error:

 

AirVPN Support Report - Generated 9/20/2017 8:56 AM UTC


-- Environment --
Eddie version: 2.12.4
Eddie OS build: macos_x64
OS type: MacOS
OS name: 10.11.2
OS description: Unix 15.2.0.0 - Darwin MacBook-Pro.local 15.2.0 Darwin Kernel Version 15.2.0: Fri Nov 13 19:56:56 PST 2015; root:xnu-3248.20.55~2/RELEASE_X86_64 x86_64
Mono /.Net Framework: v4.0.30319
OpenVPN driver: Expected
OpenVPN: 2.4.0 - OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09 (/Applications/Eddie.app/Contents/MacOS/openvpn)
SSH: OpenSSH_6.9p1, LibreSSL 2.1.8 (/usr/bin/ssh)
SSL: stunnel 5.40 (/Applications/Eddie.app/Contents/MacOS/stunnel)
curl: 7.43.0 (/usr/bin/curl)
Profile path: /Users/lad/.airvpn/AirVPN.xml
Data path: /Users/lad/.airvpn
Application path: /Applications/Eddie.app/Contents/MacOS
Executable path: /Applications/Eddie.app/Contents/MacOS/Eddie
Command line arguments (1): gui.osx.style="dark"


-- Important options not at defaults --
login: R8T3D
password: (omissis)
remember: True
connect: True
servers.blacklist: a05bfe442d818c7d18c1444f5151e43a1be4809d22b2095a6a1c1078b5a5d855
areas.blacklist: nl
mode.protocol: SSL
mode.alt: 1
advanced.expert: True
gui.osx.notifications: True
gui.osx.visible: True
gui.osx.sysbar.show_server: True


-- Logs --
I 2017.09.20 09:54:34 - Session starting.
. 2017.09.20 09:54:34 - IPv6 disabled on network adapter (Wi-Fi)
. 2017.09.20 09:54:35 - IPv6 disabled on network adapter (Bluetooth PAN)
. 2017.09.20 09:54:35 - IPv6 disabled on network adapter (Thunderbolt Bridge)
I 2017.09.20 09:54:35 - Checking authorization ...
. 2017.09.20 09:54:35 - Checking authorization ..., 1° try failed (Padding is invalid and cannot be removed.)
. 2017.09.20 09:54:35 - Checking authorization ..., 2° try failed (Length of the data to decrypt is invalid.)
. 2017.09.20 09:54:35 - Checking authorization ..., 3° try failed (Length of the data to decrypt is invalid.)
. 2017.09.20 09:54:35 - Checking authorization ..., 4° try failed (Length of the data to decrypt is invalid.)
W 2017.09.20 09:54:35 - Authorization check failed, continue anyway (Padding is invalid and cannot be removed.)
! 2017.09.20 09:54:35 - Connecting to Gacrux (Sweden, Uppsala)
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: stunnel 5.40 on x86_64-apple-darwin16.3.0 platform
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: Compiled/running with OpenSSL 1.0.2k  26 Jan 2017
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,OCSP,PSK,SNI
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: Reading configuration from file /Users/lad/.airvpn/691a1b4f5fa4c79375e49791f2aa49a5ac7ac8008997c992e90ffb28ed672b87.tmp.ssl
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: UTF-8 byte order mark not detected
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG6[ui]: Initializing service [openvpn]
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG4[ui]: Service [openvpn] needs authentication to prevent MITM attacks
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[ui]: Configuration successful
. 2017.09.20 09:54:35 - OpenVPN > OpenVPN 2.4.0 x86_64-apple-darwin16.3.0 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jan 29 2017
. 2017.09.20 09:54:35 - OpenVPN > library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[0]: Service [openvpn] accepted connection from 127.0.0.1:58104
. 2017.09.20 09:54:35 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG6[0]: s_connect: connecting 62.102.148.174:443
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[0]: s_connect: connected 62.102.148.174:443
. 2017.09.20 09:54:35 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[0]: Service [openvpn] connected remote server from 192.168.176.113:58105
. 2017.09.20 09:54:35 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG6[0]: SNI: sending servername: 62.102.148.174
. 2017.09.20 09:54:35 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:4567
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG6[0]: Peer certificate not required
. 2017.09.20 09:54:35 - OpenVPN > Socket Buffers: R=[131072->131072] S=[131072->131072]
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG3[0]: SSL_connect: 140770FC: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
. 2017.09.20 09:54:35 - OpenVPN > Attempting to establish TCP connection with [AF_INET]127.0.0.1:4567 [nonblock]
. 2017.09.20 09:54:35 - SSL > 2017.09.20 09:54:35 LOG5[0]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
. 2017.09.20 09:54:36 - OpenVPN > TCP: connect to [AF_INET]127.0.0.1:4567 failed: Connection reset by peer
. 2017.09.20 09:54:36 - OpenVPN > SIGUSR1[connection failed(soft),init_instance] received, process restarting
. 2017.09.20 09:54:36 - OpenVPN > Restart pause, 5 second(s)
! 2017.09.20 09:54:36 - Disconnecting
. 2017.09.20 09:54:37 - Connection terminated.
I 2017.09.20 09:54:40 - Checking authorization ...
. 2017.09.20 09:54:40 - Checking authorization ..., 1° try failed (Padding is invalid and cannot be removed.)
. 2017.09.20 09:54:40 - Checking authorization ..., 2° try failed (Length of the data to decrypt is invalid.)
. 2017.09.20 09:54:40 - Checking authorization ..., 3° try failed (Length of the data to decrypt is invalid.)
. 2017.09.20 09:54:40 - Checking authorization ..., 4° try failed (Length of the data to decrypt is invalid.)
W 2017.09.20 09:54:40 - Authorization check failed, continue anyway (Padding is invalid and cannot be removed.)
! 2017.09.20 09:54:40 - Connecting to Azmidiske (Sweden, Uppsala)
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: stunnel 5.40 on x86_64-apple-darwin16.3.0 platform
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: Compiled/running with OpenSSL 1.0.2k  26 Jan 2017
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,OCSP,PSK,SNI
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: Reading configuration from file /Users/lad/.airvpn/b9a4c86a4753dfc003cb80a27f030dfb024ebd9c330fcaacb54125ff461c50d1.tmp.ssl
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: UTF-8 byte order mark not detected
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG6[ui]: Initializing service [openvpn]
! 2017.09.20 09:54:40 - Disconnecting
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG4[ui]: Service [openvpn] needs authentication to prevent MITM attacks
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[ui]: Configuration successful
. 2017.09.20 09:54:40 - OpenVPN > OpenVPN 2.4.0 x86_64-apple-darwin16.3.0 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jan 29 2017
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[0]: Service [openvpn] accepted connection from 127.0.0.1:58111
. 2017.09.20 09:54:40 - OpenVPN > library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG6[0]: s_connect: connecting 62.102.148.155:443
. 2017.09.20 09:54:40 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[0]: s_connect: connected 62.102.148.155:443
. 2017.09.20 09:54:40 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[0]: Service [openvpn] connected remote server from 192.168.176.113:58112
. 2017.09.20 09:54:40 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG6[0]: SNI: sending servername: 62.102.148.155
. 2017.09.20 09:54:40 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:22075
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG6[0]: Peer certificate not required
. 2017.09.20 09:54:40 - OpenVPN > Socket Buffers: R=[131072->131072] S=[131072->131072]
. 2017.09.20 09:54:40 - OpenVPN > Attempting to establish TCP connection with [AF_INET]127.0.0.1:22075 [nonblock]
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG3[0]: SSL_connect: 140770FC: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
. 2017.09.20 09:54:40 - SSL > 2017.09.20 09:54:40 LOG5[0]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
. 2017.09.20 09:54:41 - Connection terminated.
I 2017.09.20 09:54:41 - Cancel requested.
. 2017.09.20 09:54:41 - IPv6 restored on network adapter (Wi-Fi)
. 2017.09.20 09:54:41 - IPv6 restored on network adapter (Bluetooth PAN)
. 2017.09.20 09:54:41 - IPv6 restored on network adapter (Thunderbolt Bridge)
! 2017.09.20 09:54:41 - Session terminated.


-- System --
Operating System: Unix 15.2.0.0 - Darwin MacBook-Pro.local 15.2.0 Darwin Kernel Version 15.2.0: Fri Nov 13 19:56:56 PST 2015; root:xnu-3248.20.55~2/RELEASE_X86_64 x86_64
Network Interface: lo0 (lo0, ID:lo0) - Loopback - Up
Network Interface: gif0 (gif0, ID:gif0) - Unknown - Unknown
Network Interface: stf0 (stf0, ID:stf0) - Unknown - Unknown
Network Interface: en0 (en0, ID:en0) - Ethernet - Up
Network Interface: en1 (en1, ID:en1) - Ethernet - Up
Network Interface: en2 (en2, ID:en2) - Ethernet - Up
Network Interface: bridge0 (bridge0, ID:bridge0) - Ethernet - Up
Network Interface: p2p0 (p2p0, ID:p2p0) - Ethernet - Up
Network Interface: awdl0 (awdl0, ID:awdl0) - Ethernet - Up

Routing:

Default gateways:
127.0.0.1, lo0
192.168.176.2, en0


-- OS X

-- ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=3<RXCSUM,TXCSUM>
	inet6 ::1 prefixlen 128 
	inet 127.0.0.1 netmask 0xff000000 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
	nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether ac:bc:32:98:7f:3d 
	inet 192.168.176.113 netmask 0xfffff000 broadcast 192.168.191.255
	inet6 fe80::aebc:32ff:fe98:7f3d%en0 prefixlen 64 scopeid 0x4 
	nd6 options=1<PERFORMNUD>
	media: autoselect
	status: active
en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
	options=60<TSO4,TSO6>
	ether 4a:00:03:08:9b:40 
	media: autoselect <full-duplex>
	status: inactive
en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
	options=60<TSO4,TSO6>
	ether 4a:00:03:08:9b:41 
	media: autoselect <full-duplex>
	status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether ae:bc:32:89:ca:00 
	Configuration:
		id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
		maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
		root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
		ipfilter disabled flags 0x2
	member: en1 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 5 priority 0 path cost 0
	member: en2 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 6 priority 0 path cost 0
	nd6 options=1<PERFORMNUD>
	media: <unknown type>
	status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 0e:bc:32:98:7f:3d 
	media: autoselect
	status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
	ether c2:8e:ef:e7:51:fd 
	inet6 fe80::c08e:efff:fee7:51fd%awdl0 prefixlen 64 scopeid 0x9 
	nd6 options=1<PERFORMNUD>
	media: autoselect
	status: active

Share this post

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
  • Security Check
    Play CAPTCHA Audio
    Refresh Image
Sign in to follow this  
Followers 0
Go To Topic Listing
×
×
  • Create New...