Staff

Hello! The bug was addressed 5-6 weeks ago in Eddie 2.22.2. Please test and report back in the thread at your convenience: https://airvpn.org/forums/topic/50561-eddie-desktop-edition-2216-released/?do=findComment&comment=203120 [bugfix] [linux/macos] Race condition in ping-request (thx to @cmaves) Kind regards

Hello! We have no plans to operate VPN servers in France (and in Italy) for the mandatory data retention framework still enforced in disdain of three different legally binding decisions of the CJEU (see below). France is in breach and Italy is too, but the Commission hesitates to open infraction procedures. Since the decisions pertain to the the preservation of a fundamental human right enshrined in the EU Charter of Fundamental Rights and in the European Convention on Human Rights, it does not seem inappropriate to consider that both France and Italy are committing one of the worst breaches a EU Member State can be guilty of. We might challenge with a casus belli the (il)legal framework in France, but we are already committed in other EU countries and we can't open potentially multiple legal battle fronts. The Court of Justice declares the Data Retention Directive to be invalid https://curia.europa.eu/jcms/upload/docs/application/pdf/2014-04/cp140054en.pdf The Members States may not impose a general obligation to retain data on providers of electronic communications services https://curia.europa.eu/jcms/upload/docs/application/pdf/2016-12/cp160145en.pdf The Court of Justice confirms that EU law precludes national legislation requiring a provider of electronic communications services to carry out the general and indiscriminate transmission or retention of traffic data and location data for the purpose of combating crime in general or of safeguarding national security https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-10/cp200123en.pdf Kind regards

@postergus Hello! Yes, reconnect is not bugged in the Suite, but the OpenVPN3-AirVPN library may mess up in the conditions of network down and up while a connection is ongoing. Same thing happens with OpenVPN 2.x, we see. Now we understand why you chose to shut down the daemon completely. Preferably disconnect first with "goldcrest --disconnect" and then send some goldcrest connect command: as far as we can see this procedure resolves the problem - and you will always have network lock enabled. Define your goldcrest.rc run control file to avoid keyboard interaction with Goldcrest: https://airvpn.org/suite/readme/#goldcrest-configuration goldcrest.rc directives and options will be overridden by bluetit.rc system directives (in general, those directives which are not air string prefixed). If Goldcrest options or directives conflict with bluetit.rc non-air prefixed directives, Bluetit ones are enforced. For example if you tell Goldcrest to disable Network Lock when networklockpersist on is declared in bluetit.rc, Goldcrest will send the command to Bluetit, but the daemon will refuse to comply. The logic is that all users, according to root decisions, in airvpn group have privileges to change network and settings, except those system settings which must be exclusive competence of root. You must specify in goldcrest.rc all the relevant for you connection related options (username and password for example are mandatory). Kind regards

@grammarye Hello! Thanks for the thorough report. The first failure is expected. By default, Bluetit refuses to connect to the same country you declare you are in (the old "golden rule") in "quick" mode. We will implement in the next Suite version an option (which is currently missing) to force Bluetit to accept "quick" connections from a country to the same country. In the meantime you can have a quick but dirty circumvention by setting a fake country (other than GB) in "country". directive Given that you have a precise white list, in this specific case the solution is fine. The second behavior (successful connection) contradicts the above logic pertaining to the "golden rule", and it might be considered a bug. We will review the whole logic in a future quick fix release and we will see whether it's more rigorous this last behavior or a different one. However, please note that Eddie complies with the white list: when you white list both servers and countries, Bluetit (just like Eddie Android edition does) computes the union of all the sets you specified in order to build the final white list. This is logically correct in the design, in our opinion, because the logical operation to perform on multiple white sets is their union, not their intersection. Kind regards

Hello! The critical error is here: 2022-11-22T10:51:11 Warning openvpn Cannot load private key file /var/etc/openvpn/client1.key Please make sure that the file exists, that it can be accessed by openvpn (check ownership and permissions) and that it's indeed your AirVPN client key. In the Configuration Generator. if you have split the configuration from certificates and keys, the client key is user.key As far as we see from the screenshots, you will also have to delete your username and password from the OpenVPN configuration panel, since Air VPN servers don't authenticate clients via username and password. Kind regards

@postergus Hello! The log shows that when the session network lock is disabled the persistent network lock is always enabled. When you shut down Bluetit, the persistent network lock is disabled as expected and intended. That's why we suggested as best solution that you do NOT shut down Bluetit. In your case, that's not only unnecessary, but even against what you want, we guess. Consider to manage Bluetit through Goldcrest for a proper usage for and a solution to your case. Please see also our previous message. Kind regards

Hello! The problem might be caused by Eddie, as you're running a very old version. We suggest that before you try anything else you upgrade to the latest stable release. You can download Eddie for macOS in the usual, dedicated download page here: https://airvpn.org/macos If you still experience any issue after you have completed the upgrade please do not hesitate to open a ticket to allow our support personnel to provide you with proper assistance. Kind regards

Hello! The "sleep 1" is unnecessary, you can delete it, as systemctl is synchronous. You can also order a restart to save time. Anyway you will still have a fraction of a second during which the ordinary, previous firewall rules are restored and Network Lock rules are not in place. At a first sight we see two alternative, possible solutions: don't stop Bluetit but interact with it through Goldcrest. Apparently there's no reason whatsoever to restart Bluetit in your case: Bluetit re-reads network configuration at each session start, as you may notice from the log. You can have a goldcrest.rc runfile too, therefore you can configure Goldcrest to avoid any keyboard interaction. Make sure you have networklockpersist enabled in /etc/airvpn/bluetit.rc, so that the Network Lock rules will remain in place while Bluetit is not connected keep blocking firewall rules in your system so no traffic will flow when Bluetit is not running: when Bluetit exits, it restores the blocking firewall rules. When it runs with networklockpersist, it enforces Network Lock. This second solution maintains the conceptual error to perform an unnecessary operation (restarting Bluetit) and requires total block rules by system default. Kind regards

Hello! We're very glad to inform you that the Black Friday week has started earlier this year in AirVPN! Save up to 74% when compared to one month plan price Check all plans and discounts here: https://airvpn.org/buy If you're already our customer and you wish to jump aboard for a longer period, any additional subscription will be added on top of already existing subscriptions and you will not lose any day. AirVPN is one of the oldest and most experienced consumer VPN on the market, operating since 2010. It never changed ownership and it was never sold out to data harvesting or malware specialized companies as it regrettably happened to most competitors. Since 2010 AirVPN has been faithful to its mission. AirVPN does not inspect and/or log client traffic, and offers: five simultaneous connections per account WireGuard support on all servers flexible and customizable opt-in block lists protecting you from adware, trackers, spam and other malicious sources. You can customize answers or exceptions globally, at account level or even at single device level. powerful API IPv6 full support comfortable access to your client certificates and keys management AES-GCM and ChaCha20 OpenVPN ciphers on all servers Perfect Forward Secrecy with unique per-server 4096 bit Diffie-Hellman keys active daemons load balancing for unmatched high performance - current 'all time high' on client side is 730 Mbit/s with OpenVPN and 1046 Mbit/s with WireGuard internal DNS. Each server runs its own DNS server. DNS over HTTPS and DNS over TLS are also supported. AirVPN is the only VPN provider which is actively developing OpenVPN 3 library with a fork that's currently 158 commits ahead of OpenVPN master and adds key features and bug fixes for a much more comfortable and reliable experience: AirVPN, in accordance with its mission, develops only free and open source software for many platforms, including Android, Linux (both x86 and ARM based systems), macOS and Windows. Kind regards & datalove AirVPN Staff

@Yammy75 Hello! "Better" or "resolved"? If not resolved, please do not hesitate to describe the behavior in detail. Kind regards

Hello! We can't help from here, please open a ticket at your earliest convenience (if you haven't already done so in the meantime). Please take care to mention your transaction ID to speed up the support team investigation. Kind regards

Hello! That's a list of the devices we physically have for testing (except Google TV, which has been tested only through emulators) but according to the Amazon internal checks (performed before an app obtains the authorization to be published on their store), the compatibility is full with any Amazon Fire device with Android TV 5.1 or higher version and a minimum of 1 GB RAM. Kind regards

Hello! It's probably a consequence of how Eddie picks a "recommended server". See also here: https://eddie.website/support/recommended-servers/ Remember that you can tell Eddie to connect only to a specific server set by defining a servers' white list in the "Servers" window (click the "Servers" tab to access it). Compile a white list by selecting the servers you prefer (multiple choice allows with CTRL+click or SHIFT+click) and then clicking the green checkmark. When you need to modify a white list, you can tick "Show all" to bring back the whole server list and operate again to delete, modify or create a white list (at the end of the operation remember to uncheck "Show all"). Kind regards

Hello! No, it isn't expected. We are trying to reproduce the issue, in the meantime can you please send us a report generated just after the problem has occurred? Kind regards

Hello! Eddie Android edition 2.5 and 3.0 preview have been fully and successfully tested on: nVidia Shield TV and TV Pro (Android TV 7, 8, 9, 10, 11) (physical devices) Amazon Fire TV Cube 4K Ultra HD (Fire OS 7 = Android TV 9) (physical device) Amazon Fire TV Stick Lite (Fire OS 5 = Android TV 5.1) (physical device) Google TV (Android TV 7, 9, 11, 13) (emulated) On Amazon devices you can download and install the app directly from the Amazon Store. On the Shield TV you need to side load the APK (a swift procedure anyway). Not tested on Chromecast, we're sorry. Kind regards

Hello! We see two different problems. The first one is caused by OpenVPN: apparently it has been built with an hard coded wrong path to ip: . 2022.11.13 16:34:09 - OpenVPN > /bin/ip link set dev tun0 up mtu 1500 . 2022.11.13 16:34:09 - OpenVPN > Linux ip link set failed: could not execute external program . 2022.11.13 16:34:09 - OpenVPN > Exiting due to fatal error As we can see from what Eddie log entries, you have ip in /usr/sbin. Eddie locates and runs it successfully, for example: . 2022.11.13 16:34:09 - Elevated: Exec, path:'/usr/sbin/ip', arg:'-4', arg:'route', arg:'show', exit:0, out:'default via 192.168.0.254 dev enp5s0 proto dhcp metric 100 Please create a symbolic link from /bin/ip to /usr/sbin/ip, or copy the ip file in /bin too, so the first problem will be resolved. Then, another problem is visible: W 2022.11.13 16:34:09 - Unexpected: Network interface unknown - Stack: at Eddie.Core.ConnectionTypes.IConnectionType.SearchTunNetworkInterfaceByName (System.String id) [0x00066] in <2af199c257ac4ca1aad2d2fb8c81a0e5>:0 W 2022.11.13 16:34:09 - at Eddie.Core.ConnectionTypes.OpenVPN.OnLogEvent (System.String source, System.String message) [0x00726] in <2af199c257ac4ca1aad2d2fb8c81a0e5>:0 W 2022.11.13 16:34:09 - at Eddie.Core.Session.ProcessLogEvent (System.String source, System.String message) [0x00014] in <2af199c257ac4ca1aad2d2fb8c81a0e5>:0 This might be a critical problem as well (try again anyway when you have solved the 1st problem). If the problem persists or any other issue comes out, can you send us a system report generated by Eddie, to let us can check various settings, including network interfaces? Kind regards

Hello! Thank you very much for your review. Normally we do not comment reviews, but please allow us just a quick "interference" pertaining to the software development. A lot has been done in the last years under this respect. Eddie Desktop edition backend is written in C++ (that's why you see it quite fast even in Linux or Mac), while AirVPN Suite for Linux and Hummingbird for Mac are natively built on their respective systems and written in C/C++. The OpenVPN3-AirVPN library never relied on C#, ça va sans dire, Eddie Android app also got rid of C# since the early beginning and even the ancient 1.0 version was Mono-free.. The only C# leftover is the Eddie Desktop graphical interface at the moment, and even this last one might drop C# in the future. Kind regards

@mamegoma It was a 2021 beta which is still there, as you can see from the date, only for those subscribed to beta testing phases. We will remove it even from beta testers as we see it causes confusion, thanks. Kind regards

Yup i have verified and it is indeed the correct hash. Also by the way, the application on the play store is misspelt. i believe its missing "N" for the beta version. Hello! Eddie 3 beta versions are not available on the play store, can you please elaborate? Kind regards

Hello! That's expected (unfortunately) because of the reported bug which has been addressed in Eddie 2.22.2. Please test Eddie 2.22.2 and check whether the problem has been sorted out. To download Eddie 2.22.2 in the usual download page select "Other versions" then click "Experimental". You will be brought back to the download page, pointing this time to 2.22.2. Download and install as usual. Kind regards

Hello! Reference for readers on the pinned topic here: https://airvpn.org/forums/topic/53004-openssl-error-restart-every-3-seconds/?do=findComment&comment=187787 Kind regards

Hello! Please check the APK SHA based signature (published in this thread 1st message) carefully to confirm that it's a false positive. Kind regards

Hello! We're very glad to inform you that Eddie Android edition 3.0 Beta 4 is now available. The original post has been updated accordingly. New in Beta 4: Improved management of WireGuard in Android 13 to resolve a WireGuard issue related to system network changes The mentioned issue has been found out by community testers and other persons using the official WireGuard client with any VPN service only in some Android 13 kernel releases. The implemented modification aims at resolving the problem at its root by having WireGuard re-connect every time the device records a network change, provided that "Always on VPN" and "Block connections without VPN" Android settings, as well as "VPN reconnection" Eddie option, are all enabled. Find full description, download link and SHA256 signature in the first post of this very thread. Thank you very much for your tests and please report and describe any bug you find! Kind regards

Hello! Please open a command prompt and run the rmdir command: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/rmdir Make sure to enforce /s option and type the directory name between double quotes (because a space is in the path name). Therefore: rmdir /s "absolute path and name here" Finally (re)install Eddie. Kind regards

Problem solved, it was not related to Starlink or AirVPN, but to client settings. We also have a line with Starlink in Italy and VPN traffic doesn't seem shaped. Of course consider the higher than landline latency, anyway not as high as the ones you get with old style satellite links because of low Earth orbit satellites. Kind regards