VPN not connecting when trying to work from home

Hello,

I work from home using the open vpn config file provided by my company and remmina desktop, I recently switched to Fedora but when I try to connect to the VPN, I simply cannot

it says “failed to connect” but it does not specify what the error is, can you help me to troubleshoot?

Many thanks

You need to provided details for anyone to help.

Which VPN are you using?
How did you configure it?
What Fedora desktop are you using?
Have you checked in the system journal and user journal for more information?

1 Like

Barry,

OpenVPN
i configured it by adding the VPN on the network interface of KDE
Im using Fedora KDE
the system jounal says


Feb 03 09:38:10 fedora plasmashell[3148]: The cached device pixel ratio value was stale on window update.  Please file a QTBUG which explains how to reproduce.
Feb 03 09:38:10 fedora systemd[2624]: Started app-org.kde.kjournaldbrowser@5dde5ab84efa45758b5fa9daee784a30.service - Journald Browser - Journald Browser.
Feb 03 09:38:28 fedora systemd[2624]: app-org.kde.kjournaldbrowser@5dde5ab84efa45758b5fa9daee784a30.service: Consumed 1.933s CPU time, 115.5M memory peak.
Feb 03 09:38:59 fedora plasmashell[3148]: The cached device pixel ratio value was stale on window update.  Please file a QTBUG which explains how to reproduce.
Feb 03 09:38:59 fedora systemd[2624]: Started app-org.kde.konsole@7eaa6c4c2c0a4d8c92fce795430333e4.service - Konsole - Terminal.
Feb 03 09:38:59 fedora systemd[2624]: Started app-org.kde.konsole-12746.scope.
Feb 03 09:39:25 fedora NetworkManager[2151]: <info>  [1738575565.8696] audit: op="statistics" interface="wlp44s0f0" ifindex=2 args="2000" pid=3148 uid=1000 result="success"
Feb 03 09:39:25 fedora NetworkManager[2151]: <info>  [1738575565.8917] audit: op="statistics" interface="wlp44s0f0" ifindex=2 args="500" pid=3253 uid=1000 result="success"
Feb 03 09:39:28 fedora plasmashell[3148]: QDBusObjectPath: invalid path ""
Feb 03 09:39:28 fedora NetworkManager[2151]: <info>  [1738575568.4056] vpn[0x55bfefd96fb0,42745e20-2502-4737-a0ee-e6fa9be07571,"vpn"]: starting openvpn
Feb 03 09:39:28 fedora NetworkManager[2151]: <info>  [1738575568.4061] audit: op="connection-activate" uuid="42745e20-2502-4737-a0ee-e6fa9be07571" name="vpn" pid=3148 uid=1000 result="success"
Feb 03 09:39:28 fedora kded6[3080]: org.kde.plasma.nm.kded: Unhandled VPN connection state change:  NetworkManager::VpnConnection::NeedAuth
Feb 03 09:39:28 fedora maliit-keyboard[3015]: "Object does not exist at path “/org/freedesktop/NetworkManager/ActiveConnection/2”"
Feb 03 09:39:28 fedora maliit-keyboard[3015]: "Object does not exist at path “/org/freedesktop/NetworkManager/ActiveConnection/2”"
Feb 03 09:39:28 fedora kded6[3080]: org.kde.plasma.nm.kded: Unhandled VPN connection state change:  NetworkManager::VpnConnection::Connecting
Feb 03 09:39:28 fedora nm-openvpn[12836]: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negoti>
Feb 03 09:39:28 fedora nm-openvpn[12836]: WARNING: file '/home/henry/Documents/company/VPN files/client.pem' is group or others accessible
Feb 03 09:39:28 fedora nm-openvpn[12836]: OpenVPN 2.6.13 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
Feb 03 09:39:28 fedora nm-openvpn[12836]: library versions: OpenSSL 3.2.2 4 Jun 2024, LZO 2.10
Feb 03 09:39:28 fedora nm-openvpn[12836]: DCO version: N/A
Feb 03 09:39:28 fedora nm-openvpn[12836]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 03 09:39:28 fedora audit[12836]: AVC avc:  denied  { open } for  pid=12836 comm="openvpn" path=2F686F6D652F77617373696C2F446F63756D656E74732F5345532F56504E2066696C65732F636C69656E742E637274 dev="dm-0" ino>
Feb 03 09:39:28 fedora nm-openvpn[12836]: OpenSSL: error:8000000D:system library::Permission denied:calling fopen(/home/henry/Documents/company/VPN files/client.crt, r)
Feb 03 09:39:28 fedora nm-openvpn[12836]: OpenSSL: error:10080002:BIO routines::system lib:
Feb 03 09:39:28 fedora nm-openvpn[12836]: OpenSSL: error:0A080002:SSL routines::system lib:
Feb 03 09:39:28 fedora nm-openvpn[12836]: Cannot load certificate file /home/henry/Documents/company/VPN files/client.crt
Feb 03 09:39:28 fedora nm-openvpn[12836]: Exiting due to fatal error
Feb 03 09:39:28 fedora NetworkManager[2151]: <warn>  [1738575568.6738] vpn[0x55bfefd96fb0,42745e20-2502-4737-a0ee-e6fa9be07571,"vpn"]: dbus: failure: connect-failed (1)
Feb 03 09:39:28 fedora NetworkManager[2151]: <warn>  [1738575568.6739] vpn[0x55bfefd96fb0,42745e20-2502-4737-a0ee-e6fa9be07571,"vpn"]: dbus: failure: connect-failed (1)
Feb 03 09:39:30 fedora plasmashell[3148]: The cached device pixel ratio value was stale on window update.  Please file a QTBUG which explains how to reproduce.
Feb 03 09:39:30 fedora plasmashell[3148]: qrc:/qt/qml/org/kde/plasma/components/ScrollView.qml:53:29: QML ScrollBar: Binding loop detected for property "visible":
                                          qrc:/qt/qml/org/kde/plasma/components/ScrollBar.qml:24:5
Feb 03 09:39:30 fedora plasmashell[3148]: qrc:/qt/qml/org/kde/plasma/components/ScrollView.qml:53:29: QML ScrollBar: Binding loop detected for property "visible":
                                          qrc:/qt/qml/org/kde/plasma/components/ScrollBar.qml:24:5

This is a known issue:

thank you for your help, sadly I tried the solutions on your link but it does not work

if you have any other suggestion, I would appreciate that

thanks

Did you notice this error? I assume that if you fix the permissions to allow nm-openvpn to access the file it might work. Of course there might be more files that need fixing after you fix this. But the journal logs are clear on why things failed.

If the issue persists, collect the updated log.

Also check for SELinux denials:

journalctl --no-pager -b _AUDIT_TYPE_NAME=AVC