OpenVPN for Android Connection Refused

[whistlewright 0]

Motorola Droid Maxx phone xt1080 with Android 4.4.4 started getting connection refused errors a couple of hours ago when trying to connect to Airvpn. I do not allow any automatic updates and I have not manually updated anything since I started using Airvpn earlier this week. I really need it to work on my phone. Here is the log:

 

2016-10-20 18:30:47 F-Droid built and signed version 0.6.60 running on motorola XT1080 (MSM8960), Android 4.4.4 (SU6-7.7) API 19, ABI armeabi-v7a, (motorola/obake-maxx_verizon/obake-maxx:4.4.4/SU6-7.7/5:user/release-keys)

2016-10-20 18:30:47 Building configuration…

2016-10-20 18:30:48 MANAGEMENT: CMD 'signal SIGINT'

2016-10-20 18:30:48 SIGTERM received, sending exit notification to peer

2016-10-20 18:30:50 started Socket Thread

2016-10-20 18:30:50 Network Status: CONNECTED to WIFI "suddenlink.net-E7D2-5G"

2016-10-20 18:30:50 Current Parameter Settings:

2016-10-20 18:30:50 config = '/data/data/de.blinkt.openvpn/cache/android.conf'

2016-10-20 18:30:50 mode = 0

2016-10-20 18:30:50 show_ciphers = DISABLED

2016-10-20 18:30:50 show_digests = DISABLED

2016-10-20 18:30:50 show_engines = DISABLED

2016-10-20 18:30:50 genkey = DISABLED

2016-10-20 18:30:50 key_pass_file = '[uNDEF]'

2016-10-20 18:30:50 show_tls_ciphers = DISABLED

2016-10-20 18:30:50 connect_retry_max = 0

2016-10-20 18:30:50 Connection profiles [0]:

2016-10-20 18:30:50 proto = udp

2016-10-20 18:30:50 local = '[uNDEF]'

2016-10-20 18:30:50 local_port = '[uNDEF]'

2016-10-20 18:30:50 remote = 'earth.vpn.airdns.org'

2016-10-20 18:30:50 remote_port = '443'

2016-10-20 18:30:50 remote_float = DISABLED

2016-10-20 18:30:50 bind_defined = DISABLED

2016-10-20 18:30:50 bind_local = DISABLED

2016-10-20 18:30:50 bind_ipv6_only = DISABLED

2016-10-20 18:30:50 connect_retry_seconds = 2

2016-10-20 18:30:50 connect_timeout = 120

2016-10-20 18:30:50 socks_proxy_server = '[uNDEF]'

2016-10-20 18:30:50 socks_proxy_port = '[uNDEF]'

2016-10-20 18:30:50 tun_mtu = 1500

2016-10-20 18:30:50 tun_mtu_defined = ENABLED

2016-10-20 18:30:50 link_mtu = 1500

2016-10-20 18:30:50 link_mtu_defined = DISABLED

2016-10-20 18:30:50 tun_mtu_extra = 0

2016-10-20 18:30:50 tun_mtu_extra_defined = DISABLED

2016-10-20 18:30:50 mtu_discover_type = -1

2016-10-20 18:30:50 fragment = 0

2016-10-20 18:30:50 mssfix = 1450

2016-10-20 18:30:50 explicit_exit_notification = 5

2016-10-20 18:30:50 Connection profiles END

2016-10-20 18:30:50 remote_random = DISABLED

2016-10-20 18:30:50 ipchange = '[uNDEF]'

2016-10-20 18:30:50 dev = 'tun'

2016-10-20 18:30:50 dev_type = '[uNDEF]'

2016-10-20 18:30:50 dev_node = '[uNDEF]'

2016-10-20 18:30:50 lladdr = '[uNDEF]'

2016-10-20 18:30:50 topology = 1

2016-10-20 18:30:50 ifconfig_local = '[uNDEF]'

2016-10-20 18:30:50 ifconfig_remote_netmask = '[uNDEF]'

2016-10-20 18:30:50 ifconfig_noexec = DISABLED

2016-10-20 18:30:50 ifconfig_nowarn = ENABLED

2016-10-20 18:30:50 ifconfig_ipv6_local = '[uNDEF]'

2016-10-20 18:30:50 ifconfig_ipv6_netbits = 0

2016-10-20 18:30:50 ifconfig_ipv6_remote = '[uNDEF]'

2016-10-20 18:30:50 shaper = 0

2016-10-20 18:30:50 mtu_test = 0

2016-10-20 18:30:50 mlock = DISABLED

2016-10-20 18:30:50 keepalive_ping = 0

2016-10-20 18:30:50 keepalive_timeout = 0

2016-10-20 18:30:50 inactivity_timeout = 0

2016-10-20 18:30:50 ping_send_timeout = 0

2016-10-20 18:30:50 ping_rec_timeout = 0

2016-10-20 18:30:50 ping_rec_timeout_action = 0

2016-10-20 18:30:50 ping_timer_remote = DISABLED

2016-10-20 18:30:50 remap_sigusr1 = 0

2016-10-20 18:30:50 persist_tun = ENABLED

2016-10-20 18:30:50 persist_local_ip = DISABLED

2016-10-20 18:30:50 persist_remote_ip = DISABLED

2016-10-20 18:30:50 persist_key = DISABLED

2016-10-20 18:30:50 passtos = DISABLED

2016-10-20 18:30:50 resolve_retry_seconds = 1000000000

2016-10-20 18:30:50 resolve_in_advance = ENABLED

2016-10-20 18:30:50 username = '[uNDEF]'

2016-10-20 18:30:50 groupname = '[uNDEF]'

2016-10-20 18:30:50 chroot_dir = '[uNDEF]'

2016-10-20 18:30:50 cd_dir = '[uNDEF]'

2016-10-20 18:30:50 writepid = '[uNDEF]'

2016-10-20 18:30:50 up_script = '[uNDEF]'

2016-10-20 18:30:50 down_script = '[uNDEF]'

2016-10-20 18:30:50 down_pre = DISABLED

2016-10-20 18:30:50 up_restart = DISABLED

2016-10-20 18:30:50 up_delay = DISABLED

2016-10-20 18:30:50 daemon = DISABLED

2016-10-20 18:30:50 inetd = 0

2016-10-20 18:30:50 log = DISABLED

2016-10-20 18:30:50 suppress_timestamps = DISABLED

2016-10-20 18:30:50 machine_readable_output = ENABLED

2016-10-20 18:30:50 nice = 0

2016-10-20 18:30:50 verbosity = 4

2016-10-20 18:30:50 mute = 0

2016-10-20 18:30:50 gremlin = 0

2016-10-20 18:30:50 status_file = '[uNDEF]'

2016-10-20 18:30:50 status_file_version = 1

2016-10-20 18:30:50 status_file_update_freq = 60

2016-10-20 18:30:50 occ = ENABLED

2016-10-20 18:30:50 rcvbuf = 0

2016-10-20 18:30:50 sndbuf = 0

2016-10-20 18:30:50 sockflags = 0

2016-10-20 18:30:50 fast_io = DISABLED

2016-10-20 18:30:50 comp.alg = 2

2016-10-20 18:30:50 comp.flags = 1

2016-10-20 18:30:50 route_script = '[uNDEF]'

2016-10-20 18:30:50 route_default_gateway = '[uNDEF]'

2016-10-20 18:30:50 route_default_metric = 0

2016-10-20 18:30:50 route_noexec = DISABLED

2016-10-20 18:30:50 route_delay = 0

2016-10-20 18:30:50 route_delay_window = 30

2016-10-20 18:30:50 route_delay_defined = DISABLED

2016-10-20 18:30:50 route_nopull = DISABLED

2016-10-20 18:30:50 route_gateway_via_dhcp = DISABLED

2016-10-20 18:30:50 allow_pull_fqdn = DISABLED

2016-10-20 18:30:50 management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'

2016-10-20 18:30:50 management_port = 'unix'

2016-10-20 18:30:50 management_user_pass = '[uNDEF]'

2016-10-20 18:30:50 management_log_history_cache = 250

2016-10-20 18:30:50 management_echo_buffer_size = 100

2016-10-20 18:30:50 management_write_peer_info_file = '[uNDEF]'

2016-10-20 18:30:50 management_client_user = '[uNDEF]'

2016-10-20 18:30:50 management_client_group = '[uNDEF]'

2016-10-20 18:30:50 management_flags = 4390

2016-10-20 18:30:50 shared_secret_file = '[uNDEF]'

2016-10-20 18:30:50 key_direction = 2

2016-10-20 18:30:50 ciphername = 'AES-256-CBC'

2016-10-20 18:30:50 authname = 'SHA1'

2016-10-20 18:30:50 prng_hash = 'SHA1'

2016-10-20 18:30:50 prng_nonce_secret_len = 16

2016-10-20 18:30:50 keysize = 0

2016-10-20 18:30:50 engine = DISABLED

2016-10-20 18:30:50 replay = ENABLED

2016-10-20 18:30:50 mute_replay_warnings = DISABLED

2016-10-20 18:30:50 replay_window = 64

2016-10-20 18:30:50 replay_time = 15

2016-10-20 18:30:50 packet_id_file = '[uNDEF]'

2016-10-20 18:30:50 use_iv = ENABLED

2016-10-20 18:30:50 test_crypto = DISABLED

2016-10-20 18:30:50 tls_server = DISABLED

2016-10-20 18:30:50 tls_client = ENABLED

2016-10-20 18:30:50 key_method = 2

2016-10-20 18:30:50 ca_file = '[[iNLINE]]'

2016-10-20 18:30:50 ca_path = '[uNDEF]'

2016-10-20 18:30:50 dh_file = '[uNDEF]'

2016-10-20 18:30:50 cert_file = '[[iNLINE]]'

2016-10-20 18:30:50 extra_certs_file = '[uNDEF]'

2016-10-20 18:30:50 priv_key_file = '[[iNLINE]]'

2016-10-20 18:30:50 pkcs12_file = '[uNDEF]'

2016-10-20 18:30:50 cipher_list = '[uNDEF]'

2016-10-20 18:30:50 tls_verify = '[uNDEF]'

2016-10-20 18:30:50 tls_export_cert = '[uNDEF]'

2016-10-20 18:30:50 verify_x509_type = 0

2016-10-20 18:30:50 verify_x509_name = '[uNDEF]'

2016-10-20 18:30:50 crl_file = '[uNDEF]'

2016-10-20 18:30:50 ns_cert_type = 0

2016-10-20 18:30:50 remote_cert_ku = 160

2016-10-20 18:30:50 remote_cert_ku = 136

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_ku = 0

2016-10-20 18:30:50 remote_cert_eku = 'TLS Web Server Authentication'

2016-10-20 18:30:50 ssl_flags = 0

2016-10-20 18:30:50 tls_timeout = 2

2016-10-20 18:30:50 renegotiate_bytes = 0

2016-10-20 18:30:50 renegotiate_packets = 0

2016-10-20 18:30:50 renegotiate_seconds = 3600

2016-10-20 18:30:50 handshake_window = 60

2016-10-20 18:30:50 transition_window = 3600

2016-10-20 18:30:50 single_session = DISABLED

2016-10-20 18:30:50 push_peer_info = DISABLED

2016-10-20 18:30:50 tls_exit = DISABLED

2016-10-20 18:30:50 tls_auth_file = '[[iNLINE]]'

2016-10-20 18:30:50 client = ENABLED

2016-10-20 18:30:50 pull = ENABLED

2016-10-20 18:30:50 auth_user_pass_file = '[uNDEF]'

2016-10-20 18:30:50 OpenVPN 2.4-icsopenvpn [git:HEAD-9d8801b6185d7453] android-14-armeabi-v7a [sSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [iPv6] built on Oct 13 2016

2016-10-20 18:30:50 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09

2016-10-20 18:30:50 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket

2016-10-20 18:30:50 MANAGEMENT: CMD 'hold release'

2016-10-20 18:30:50 MANAGEMENT: CMD 'bytecount 2'

2016-10-20 18:30:50 MANAGEMENT: CMD 'state on'

2016-10-20 18:30:50 MANAGEMENT: CMD 'proxy NONE'

2016-10-20 18:30:50 Connection to OpenVPN closed (socket closed)

2016-10-20 18:30:50 MANAGEMENT: Client disconnected

2016-10-20 18:30:50 MANAGEMENT: Triggering management exit

2016-10-20 18:30:50 TCP/UDP: Closing socket

2016-10-20 18:30:50 SIGTERM[soft,management-exit] received, process exiting

2016-10-20 18:30:50 MANAGEMENT: >STATE:1477006250,EXITING,management-exit,,,,,

2016-10-20 18:30:51 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2016-10-20 18:30:51 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2016-10-20 18:30:51 LZO compression initializing

2016-10-20 18:30:51 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]

2016-10-20 18:30:51 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]

2016-10-20 18:30:51 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'

2016-10-20 18:30:51 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'

2016-10-20 18:30:51 TCP/UDP: Preserving recently used remote address: [AF_INET]71.19.249.195:443

2016-10-20 18:30:51 Socket Buffers: R=[163840->163840] S=[163840->163840]

2016-10-20 18:30:51 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'

2016-10-20 18:30:51 UDP link local: (not bound)

2016-10-20 18:30:51 UDP link remote: [AF_INET]71.19.249.195:443

2016-10-20 18:30:51 MANAGEMENT: >STATE:1477006251,WAIT,,,,,,

2016-10-20 18:30:51 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:30:53 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:30:57 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:31:05 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:31:21 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:31:51 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2016-10-20 18:31:51 TLS Error: TLS handshake failed

2016-10-20 18:31:51 TCP/UDP: Closing socket

2016-10-20 18:31:51 SIGUSR1[soft,tls-error] received, process restarting

2016-10-20 18:31:51 MANAGEMENT: >STATE:1477006311,RECONNECTING,tls-error,,,,,

2016-10-20 18:31:53 MANAGEMENT: CMD 'hold release'

2016-10-20 18:31:53 MANAGEMENT: CMD 'bytecount 2'

2016-10-20 18:31:53 MANAGEMENT: CMD 'state on'

2016-10-20 18:31:53 MANAGEMENT: CMD 'proxy NONE'

2016-10-20 18:31:54 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2016-10-20 18:31:54 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2016-10-20 18:31:54 LZO compression initializing

2016-10-20 18:31:54 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]

2016-10-20 18:31:54 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]

2016-10-20 18:31:54 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'

2016-10-20 18:31:54 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'

2016-10-20 18:31:54 TCP/UDP: Preserving recently used remote address: [AF_INET]71.19.249.195:443

2016-10-20 18:31:54 Socket Buffers: R=[163840->163840] S=[163840->163840]

2016-10-20 18:31:54 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'

2016-10-20 18:31:54 UDP link local: (not bound)

2016-10-20 18:31:54 UDP link remote: [AF_INET]71.19.249.195:443

2016-10-20 18:31:54 MANAGEMENT: >STATE:1477006314,WAIT,,,,,,

2016-10-20 18:31:54 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:31:56 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:32:01 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:32:10 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:32:25 read UDP [ECONNREFUSED]: Connection refused (code=111)

2016-10-20 18:32:54 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2016-10-20 18:32:54 TLS Error: TLS handshake failed

2016-10-20 18:32:54 TCP/UDP: Closing socket

2016-10-20 18:32:54 SIGUSR1[soft,tls-error] received, process restarting

2016-10-20 18:32:54 MANAGEMENT: >STATE:1477006374,RECONNECTING,tls-error,,,,,

2016-10-20 18:32:56 MANAGEMENT: CMD 'hold release'

2016-10-20 18:32:56 MANAGEMENT: CMD 'proxy NONE'

2016-10-20 18:32:56 MANAGEMENT: CMD 'bytecount 2'

2016-10-20 18:32:56 MANAGEMENT: CMD 'state on'

 

Help please.

[Fly AirVPN 12]

This thread is a bit aged, but I'll add what worked for me. I was having connection refused issue on a Nexus 5 and Samsung Tab S using OpenVPN for Android 0.6.63 with an AirVPN Linux UDP 443 profile. The fix for me, was to edit the profile under Routing to uncheck the Bypass VPN for local networks setting.

As a side note, on a Samsung Tab A the profile connects successfully regardless if the Bypass setting is on or off. I have no idea why the difference. All devices are currently running Android 6.0.1.

[LZ1 663]

This thread is a bit aged, but I'll add what worked for me. I was having connection refused issue on a Nexus 5 and Samsung Tab S using OpenVPN for Android 0.6.63 with an AirVPN Linux UDP 443 profile. The fix for me, was to edit the profile under Routing to uncheck the Bypass VPN for local networks setting.

 

As a side note, on a Samsung Tab A the profile connects successfully regardless if the Bypass setting is on or off. I have no idea why the difference. All devices are currently running Android 6.0.1.

Hello!

 

Thank you for sharing your solution with the community

Staff did sticky a thread in the Eddie Client forum regarding connection refused.

[OpenSourcerer 1360]

Could you try upgrading to version 0.6.63? Apparently it is using OpenVPN 2.5 already...

13:17 OpenVPN 2.5-icsopenvpn [git:icsopenvpn-d0314998c474c182+] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Dec 26 201

Also reenable the bypass option after updating.