Proton VPN breaks keyring

Support Network
1

I am using Manjaro XFCE. I find that if I use ProtonVPN and connect to a server, the keyring is corrupted and has to be deleted (with command rm ~/.local/share/keyrings/* ).Every time.

Proton does not support Manjaro or KDE so they have no answer, except use the CLI for now. This works, but for how long.

Does anyone else have this problem or is it just my system?

I have been experimenting with installing other VPNs to prepare for censorship that our PM (Trudeau) wants to impose and find that many will not install. The installation starts but ends with the transaction failing to commit.

I am not a programmer, but would appreciate any helpful comments.Thank you.

2

That sounds strange

Possibly your system.

I can use surfshark, nordvpn and protonvpn without any issues.

1 Like
3

Since I can’t use VPN using the 4 series GUI and cannot install surfshark or nordvpn, I am open to suggestions as to how to fix my system.

4

Why would it corrupt the keyring? It is just used to save the credentials. Do you mean every credential there is corrupt on your keyring?

1 Like
5

I don’t know why. That is why I am asking. I do not know if everything is corrupt or the entire file. I just know I have to delete the file and reboot. Then re-enter passwords in Brave, Standard Notes, etc.

I have been told that there is a conflict between keyring and kwallet.

I cannot remove kwallet as other things depend on it. And other programs depend on programs that depend on it.

6

the command line client is what I use

That is correct - but the GUI you can build matching the command line client is still wokring.

Summary

image
image454×767 83 KB

Why not?

7

The installation starts but ends with the transaction failing to commit.

8

On my side it doesn’t break keyring, I can login, but it simply never connects, why so ever… CLI and GUI. :man_shrugging: Anyway I just tried the free servers.

9

They can be busy - the free servers - I have subscription with ProtonVPN because I have my mail hosted by Proton AG

10

I too just tried the free ones. They connect with both CLI & GUI, but the GUI results in the break.

11

Well, you might think, but if you download the OVPN file and save the username+password globally, then I’m connected in 1 second and have the IPv4 from Tokyo, but the IPv6 from home. xD

@scamidge I would recommend the manual way… just download the files, import them and set the username and password globally. Hmm… maybe I should share my bulk import script :slight_smile: Anyway, the proton app is not reliable for me…

2 Likes
12

Yes - that is possible - just watch out for OpenVPN DNS leaks when doing so.

13

I tried installing Open VPN but got the error message:
Options error: In [CMD-LINE]:1: Error opening configuration file: nl-free-294079.protonvpn.udp.ovpn

14
  1. Install the plugin:
pamac install networkmanager-openvpn
  1. Import the file:
nmcli connection import type openvpn file nl-free-294079.protonvpn.udp.ovpn
  1. Set the username (replace $VPN_USER ) :
nmcli connection modify nl-free-294079.protonvpn.udp +vpn.data username=$VPN_USER
  1. Set the password (replace $VPN_PASS) :
sudo sed -i "s;\[ipv4\];\[vpn-secrets\]\npassword=$VPN_PASS\n\n\[ipv4\];g" /etc/NetworkManager/system-connections/jp-free-310012.protonvpn.udp.nmconnection
sudo sed -i "s;password-flags=1;password-flags=0;g" /etc/NetworkManager/system-connections/jp-free-310012.protonvpn.udp.nmconnection
  1. Empty the permissions, so that everyone can use the VPN on that PC:
nmcli connection modify nl-free-294079.protonvpn.udp connection.permissions ''
  1. Restart the NetworkManager:
systemctl restart NetworkManager
  1. Activate the VPN connection:
nmcli connection up  nl-free-294079.protonvpn.udp
  1. Get your current IP:
curl -4 icanhazip.com
curl -6 icanhazip.com

That are the basic steps. Can also be done through the GUI. Hope that helps :wink:

2 Likes
15

I did what you recommended but was told:

[steve@steve Downloads]$ sudo openvpn nl-free-294079.protonvpn.udp.ovpn
[sudo] password for steve: 
2024-05-23 11:08:34 OpenVPN 2.6.10 [git:makepkg/ba0f62fb950c56a0+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] built on Mar 20 2024
2024-05-23 11:08:34 library versions: OpenSSL 3.3.0 9 Apr 2024, LZO 2.10
2024-05-23 11:08:34 DCO version: N/A
Enter Auth Username: scamidge
Enter Auth Password: ••••••••••••••          
2024-05-23 11:08:51 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2024-05-23 11:08:51 TCP/UDP: Preserving recently used remote address: [AF_INET]185.177.124.84:5060
2024-05-23 11:08:51 UDPv4 link local: (not bound)
2024-05-23 11:08:51 UDPv4 link remote: [AF_INET]185.177.124.84:5060
2024-05-23 11:08:51 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-05-23 11:08:52 [node-nl-108.protonvpn.net] Peer Connection Initiated with [AF_INET]185.177.124.84:5060
2024-05-23 11:08:58 AUTH: Received control message: AUTH_FAILED
2024-05-23 11:08:58 SIGTERM[soft,auth-failure] received, process exiting

Moderator edit: In the future, please use proper formatting: [HowTo] Post command output and file content as formatted text

16

Use your NetworkManager… it has an plugin for OpenVPN. You did everything in your NetworkManager. There should be a new connection in your NetworkManager, which you have to activate.

I added the steps above :arrow_up:

1 Like
17

I found a program called Advanced Network Configuration. Never used it before. I located the setting for the location, but I do not see how to activate it?

18

There should be on the right bottom an indicator (tray) for the NetworkManager in XFCE. Usually there you can choose it.

1 Like
19

That worked. Thank you.

So I have to do all this for every possible free server that is available?

How do I disconnect?

20 
nmcli connection down nl-free-294079.protonvpn.udp

Basically yes… if you don’t automate this, you’ll have to do it manually.

1 Like