10
9
Fork
You've already forked linux-app
14

Unable to connect #667

Closed
opened 2025年11月06日 10:03:16 +01:00 by dccabanas · 7 comments

Installation

I have tried installing eduvpn inside a toolbox environment and also as a layered package. In both cases the connection is unsuccessful.

Version

eduVPN GUI version: 4.6.0 with eduvpn-common version: 4.0.0
eduVPN CLI version: 4.6.0 with eduvpn-common version: 4.0.0

Check if your issue is in the known issues list

Not that I saw.

OS/Distribution

I'm running fedora/43/x86_64/silverblue Version: 43.20251106.0.

Logs

Whenever I try to connect to eduVPN, I click on the authorize button on the browser, it says the client has been authorized successfully, but the vpn disconnected immediately.

time=2025年11月06日T08:59:23.451Z level=DEBUG msg="client wants to get a VPN config" server_id=https://tudelft.eduvpn.nl/ server_type=1 prefer_tcp=false startup=false
time=2025年11月06日T08:59:23.451Z level=DEBUG msg="FSM transition" old=Main new=GettingConfig
time=2025年11月06日T08:59:23.477Z level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json
time=2025年11月06日T08:59:24.126Z level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified"
time=2025年11月06日T08:59:24.139Z level=DEBUG msg="OAuth log" log="Access token is expired"
time=2025年11月06日T08:59:24.139Z level=DEBUG msg="sending request" method=GET url=https://tudelft.eduvpn.nl/.well-known/vpn-user-portal
time=2025年11月06日T08:59:24.659Z level=DEBUG msg="OAuth log" log="Got a refresh token error: tokens are invalid due to: got invalid_grant when refreshing the tokens with description: \"refresh_token\" expired"
time=2025年11月06日T08:59:24.660Z level=DEBUG msg="FSM transition" old=GettingConfig new=OAuthStarted
time=2025年11月06日T08:59:28.022Z level=DEBUG msg="FSM transition" old=OAuthStarted new=Main
time=2025年11月06日T08:59:28.028Z level=DEBUG msg="FSM transition" old=Main new=GettingConfig
time=2025年11月06日T08:59:28.028Z level=DEBUG msg="sending request" method=GET url=https://tudelft.eduvpn.nl/portal/api/v3/info
time=2025年11月06日T08:59:28.083Z level=DEBUG msg="sending request" method=POST url=https://tudelft.eduvpn.nl/portal/api/v3/connect
time=2025年11月06日T08:59:28.155Z level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig
time=2025年11月06日T08:59:28.156Z level=DEBUG msg="FSM transition" old=GotConfig new=Connecting
time=2025年11月06日T08:59:37.580Z level=DEBUG msg="FSM transition" old=Connecting new=Disconnecting
time=2025年11月06日T08:59:37.581Z level=DEBUG msg="client wants to cleanup VPN connection"
2025年11月06日 08:59:37,582 - MainThread - WARNING - eduvpn.nm - nm.py:786 - no connection to deactivate of uuid <module 'uuid' from '/usr/lib64/python3.14/uuid.py'>
time=2025年11月06日T08:59:37.593Z level=DEBUG msg="sending request" method=POST url=https://tudelft.eduvpn.nl/portal/api/v3/disconnect
time=2025年11月06日T08:59:38.076Z level=DEBUG msg="FSM transition" old=Disconnecting new=Disconnected
time=2025年11月06日T08:59:46.634Z level=DEBUG msg="FSM transition" old=Disconnected new=Deregistered
# Installation I have tried installing eduvpn inside a toolbox environment and also as a layered package. In both cases the connection is unsuccessful. # Version ``` eduVPN GUI version: 4.6.0 with eduvpn-common version: 4.0.0 eduVPN CLI version: 4.6.0 with eduvpn-common version: 4.0.0 ``` # Check if your issue is in the known issues list Not that I saw. # OS/Distribution I'm running fedora/43/x86_64/silverblue Version: 43.20251106.0. # Logs Whenever I try to connect to eduVPN, I click on the authorize button on the browser, it says the client has been authorized successfully, but the vpn disconnected immediately. ``` time=2025年11月06日T08:59:23.451Z level=DEBUG msg="client wants to get a VPN config" server_id=https://tudelft.eduvpn.nl/ server_type=1 prefer_tcp=false startup=false time=2025年11月06日T08:59:23.451Z level=DEBUG msg="FSM transition" old=Main new=GettingConfig time=2025年11月06日T08:59:23.477Z level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json time=2025年11月06日T08:59:24.126Z level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified" time=2025年11月06日T08:59:24.139Z level=DEBUG msg="OAuth log" log="Access token is expired" time=2025年11月06日T08:59:24.139Z level=DEBUG msg="sending request" method=GET url=https://tudelft.eduvpn.nl/.well-known/vpn-user-portal time=2025年11月06日T08:59:24.659Z level=DEBUG msg="OAuth log" log="Got a refresh token error: tokens are invalid due to: got invalid_grant when refreshing the tokens with description: \"refresh_token\" expired" time=2025年11月06日T08:59:24.660Z level=DEBUG msg="FSM transition" old=GettingConfig new=OAuthStarted time=2025年11月06日T08:59:28.022Z level=DEBUG msg="FSM transition" old=OAuthStarted new=Main time=2025年11月06日T08:59:28.028Z level=DEBUG msg="FSM transition" old=Main new=GettingConfig time=2025年11月06日T08:59:28.028Z level=DEBUG msg="sending request" method=GET url=https://tudelft.eduvpn.nl/portal/api/v3/info time=2025年11月06日T08:59:28.083Z level=DEBUG msg="sending request" method=POST url=https://tudelft.eduvpn.nl/portal/api/v3/connect time=2025年11月06日T08:59:28.155Z level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig time=2025年11月06日T08:59:28.156Z level=DEBUG msg="FSM transition" old=GotConfig new=Connecting time=2025年11月06日T08:59:37.580Z level=DEBUG msg="FSM transition" old=Connecting new=Disconnecting time=2025年11月06日T08:59:37.581Z level=DEBUG msg="client wants to cleanup VPN connection" 2025年11月06日 08:59:37,582 - MainThread - WARNING - eduvpn.nm - nm.py:786 - no connection to deactivate of uuid <module 'uuid' from '/usr/lib64/python3.14/uuid.py'> time=2025年11月06日T08:59:37.593Z level=DEBUG msg="sending request" method=POST url=https://tudelft.eduvpn.nl/portal/api/v3/disconnect time=2025年11月06日T08:59:38.076Z level=DEBUG msg="FSM transition" old=Disconnecting new=Disconnected time=2025年11月06日T08:59:46.634Z level=DEBUG msg="FSM transition" old=Disconnected new=Deregistered ```

What are the NetworkManager logs? journalctl -u NetworkManager

What are the NetworkManager logs? `journalctl -u NetworkManager`

I believe these are the relevant lines

NetworkManager[1412]: <info> [1762419568.2168] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: starting openvpn
NetworkManager[1412]: <info> [1762419568.2171] audit: op="connection-activate" uuid="6ebd578c-485e-4d59-9e53-19aa31765ec1" name="eduVPN" pid=70080 uid=1000 result=">
nm-openvpn[70379]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need th>
nm-openvpn[70379]: Cannot pre-load keyfile (~/.local/share/networkmanagement/certificates/nm-openvpn/eduVPN-tls-crypt.pem)
NetworkManager[1412]: <warn> [1762419568.2397] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: dbus: failure: connect-failed (1)
nm-openvpn[70379]: Exiting due to fatal error
NetworkManager[1412]: <warn> [1762419568.2398] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: dbus: failure: connect-failed (1)
I believe these are the relevant lines ``` NetworkManager[1412]: <info> [1762419568.2168] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: starting openvpn NetworkManager[1412]: <info> [1762419568.2171] audit: op="connection-activate" uuid="6ebd578c-485e-4d59-9e53-19aa31765ec1" name="eduVPN" pid=70080 uid=1000 result="> nm-openvpn[70379]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need th> nm-openvpn[70379]: Cannot pre-load keyfile (~/.local/share/networkmanagement/certificates/nm-openvpn/eduVPN-tls-crypt.pem) NetworkManager[1412]: <warn> [1762419568.2397] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: dbus: failure: connect-failed (1) nm-openvpn[70379]: Exiting due to fatal error NetworkManager[1412]: <warn> [1762419568.2398] vpn[0x562937db6190,6ebd578c-485e-4d59-9e53-19aa31765ec1,"eduVPN"]: dbus: failure: connect-failed (1) ```

Hi, did you fix it?

Hi, did you fix it?

No, sorry. I accidentally closed it.

No, sorry. I accidentally closed it.

@jwijenbergh Hey, do you have any thoughts on how to fix the issue?

@jwijenbergh Hey, do you have any thoughts on how to fix the issue?

this seems like a fedora silverblue issue with selinux: https://discussion.fedoraproject.org/t/nm-openvpn-cannot-pre-load-keyfile/74574

this seems like a fedora silverblue issue with selinux: https://discussion.fedoraproject.org/t/nm-openvpn-cannot-pre-load-keyfile/74574

@jwijenbergh wrote in #667 (comment):

this seems like a fedora silverblue issue with selinux: https://discussion.fedoraproject.org/t/nm-openvpn-cannot-pre-load-keyfile/74574

That's a shame, not sure how to fix it. Thanks anyway for the help.

@jwijenbergh wrote in https://codeberg.org/eduVPN/linux-app/issues/667#issuecomment-8247116: > this seems like a fedora silverblue issue with selinux: https://discussion.fedoraproject.org/t/nm-openvpn-cannot-pre-load-keyfile/74574 That's a shame, not sure how to fix it. Thanks anyway for the help.
Sign in to join this conversation.
No Branch/Tag specified
master
upstream-deb
openvpn-persistent
1.x
4.7.2
4.7.1
4.7.0
4.6.0
4.5.1
4.5.0
4.4.99.0
4.4.0
4.3.1
4.3.0
4.2.99.1
4.2.99.0
4.2.1
4.2.0
4.1.99.0
4.1.3
4.1.2
4.1.1
4.1.0
3.1.1
4.0.1
4.0.0
pr-3.3.1
pr-3.3.0
pr-3.2.0
3.1.0
3.0.0
2.2.1
2.2.0
2.1.0
2.0.0
1.1
1.0.3
1.0.2
1.0.1
1.0rc17
1.0rc16
1.0rc15
1.0rc14
1.0rc13
1.0rc12
1.0rc11
1.0rc10
1.0rc9
1.0rc8
1.0rc7
1.0rc6
1.0rc5
1.0rc4
1.0rc3
1.0rc2
1.0rc1
0.8
0.7.2
0.7.1
0.7
0.6.1
0.6
0.5.1
0.5
0.3
0.2.1
0.2
0.1.1
0.1
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/linux-app#667
Reference in a new issue
eduVPN/linux-app
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?