Cannot set up IPv6 connection with Linux network-manager

[rackelhahn69 0]

heyhey,

i'm having trouble setting up a ipv6 vpn connection with the (manjaro/arch) linux "network-manager".

when i want to set up a ipv4 connection, i go to the "client area" on airvpn.org, start the "config generator", check "advanced" an then set:

• OS: Linux
• OpenVPN version >= 2.4
• Need IPv6?: "IPv4 only"
• Protocol: UDP | Port: 443 | Entry IP: 1
• In the advanced section i check "Separate keys/certs from .ovpn file" and "Resolved hosts in .ovpn file"
• Server: xxx

i then generate the config and download all the files into a new/empty folder.

afterwards i start the network-manager connection editors gui ($ nm-connection-editor), click the "+" button, select "import a saved vpn configuration", click "create", navigate to the folder with the config and key files, select the "xxx.ovpn" file and then just click "save", since the nm-connection-editor automatically sets up the right key files etc.

in this case everything works as expected.

HOWEVER if i try to do the same with a IPv6 config file ("Need IPv6?" set to "IPv4 & IPv6 (connect with IPv6)" - all other settings the same) i get an error when trying to "import a saved vpn configuration" with the nm-connection-editor.
 

could not create new connection \\

 

the vpn plugin failed to import the vpn connection correctly: key file contains line "client" which is not a key-value pair, group, or comment

when i open the "xxx.ovpn" file with a text editor and change the line "proto udp6" (this is the line before "tls-auth 'ta.key' 1") to "proto udp", i can import without the error message however the connection is not working afterwards.

do you have any ideas what i could do different? should i set up the connection manually?

thanks in advance!

[greerd 5]

I thought you have to use ip entry node numbers 3 or 4 for ipv6, or at least for tlscrypt, maybe that'll help?

[rackelhahn69 0]

I thought you have to use ip entry node numbers 3 or 4 for ipv6, or at least for tlscrypt, maybe that'll help?

 

 

sadly that didn't help. thanks for the tip though!

[Staff 10016]

HOWEVER if i try to do the same with a IPv6 config file ("Need IPv6?" set to "IPv4 & IPv6 (connect with IPv6)" - all other settings the same) i get an error when trying to "import a saved vpn configuration" with the nm-connection-editor.

 

could not create new connection \\

 

the vpn plugin failed to import the vpn connection correctly: key file contains line "client" which is not a key-value pair, group, or comment

 

when i open the "xxx.ovpn" file with a text editor and change the line "proto udp6" (this is the line before "tls-auth 'ta.key' 1") to "proto udp", i can import without the error message however the connection is not working afterwards.

 

do you have any ideas what i could do different? should i set up the connection manually?

 

thanks in advance!

 

Hello!

 

It seems a nm-openvpn plugin parser bug: when it finds "udp6" it assumes that it is dealing with some certificate or key, instead of an ovpn configuration file. nm-openvpn plugin has historically been affected by so many critical bugs that we renounced to support it years ago. Still nowadays we would recommend that you get rid of it.

 

Run OpenVPN directly and this problem should be sorted out. Important: you also need OpenVPN 2.4 or higher version for tls-crypt support.

 

IPv6 support is also problematic in OpenVPN versions older than 2.4.

 

Kind regards