trying to setup VPN on NetVM, can't connect and no error

[André Borud]

I'm trying to setup a vpn in the NetVM by importing .ovpn settings. The import of settings is successful and adds the newly imported VPN to the list of possible VPNs to connect to. But when clicking on one to connect I get a little message saying its not possible to connect almost the same instance, like it actually didn't try to connect.

These are the settings I'm trying to use:

client
dev tun
proto udp
remote ***-a05.*****.com 443
resolv-retry infinite
nobind
persist-key
persist-tun
persist-remote-ip
ca ca.******.com.crt
verify-x509-name ***-a05.*****.com name
auth-user-pass
comp-lzo
verb 3
auth SHA256
cipher AES-256-CBC
keysize 256
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA

and then I use a username and password.

Is there a way to see an error message or something atleast to fix whatever the problem is?

Using QubesOS 3.2 on an Intel NUC i7.

[Chris Laprise]

If you're trying to import an ovpn file into Network Manager, its
error-prone and I've never gotten it to work. The other problem I see is
putting the VPN connection in netvm, when it should be in a proxyvm for
security.

The Qubes VPN doc provides two ways to setup a proxyvm for VPN: An easy
way using Network Manager, and a script-based method that uses
pre-existing ovpn files -- the latter has anti-leak protection:

https://www.qubes-os.org/doc/vpn/

I also have a project that uses the anti-leak features and is simpler to
install:

https://github.com/tasket/Qubes-vpn-support


--

Chris Laprise, tas...@posteo.net
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886