TLS Error: TLS key negotiation failed ??
Hey, I am not sure the subject is accurate since I'm not sure what the problem is, so please change it to something more meaningful.
I'm trying to connect to Riseup's servers with Bitmask on my laptop, running Debian testing with Openbox (no Gnome). It's a 32-bit machine. Bitmask version is 0.9.1.
IPv6 is enabled and I can connect with Bitmask on my Android phone on the same network, so it's not a network problem.
The network connection is provided by the Android phone's UBS tethering:
enx161c0aad29b1: flags=4163 mtu 1500 inet 192.168.42.46 netmask 255.255.255.0 broadcast 192.168.42.255 inet6 fe80::141c:aff:fead:29b1 prefixlen 64 scopeid 0x20 ether 16:1c:0a:ad:29:b1 txqueuelen 1000 (Ethernet) RX packets 8388 bytes 5266874 (5.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 8165 bytes 1678563 (1.6 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
I do think this is the relevant part of the debug log:
[2016-05-03 20:17:32] WARNING - L#530 : leap.bitmask.services.eip.vpnprocess:_connect_management - Could not connect to OpenVPN yet: MissingSocketError() [2016-05-03 20:17:32] DEBUG - L#542 : leap.bitmask.services.eip.vpnprocess:_connectCb - Cannot connect to management... [2016-05-03 20:17:32] DEBUG - L#456 : leap.bitmask.backend.components:start - EIP: no errors [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 OpenVPN 2.3.10 i586-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 21 2016 [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 WARNING: you are using user/group/chroot/setcon without persist-tun -- this may cause restarts to fail [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 WARNING: you are using user/group/chroot/setcon without persist-key -- this may cause restarts to fail [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA' [2016-05-03 20:17:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:17:33 2016 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay Tue May 3 16:17:33 2016 UDPv4 link local: [undef] Tue May 3 16:17:33 2016 UDPv4 link remote: [AF_INET]199.58.81.145:443 [2016-05-03 20:17:33] DEBUG - L#597 : leap.bitmask.services.eip.vpnprocess:try_to_connect_to_management - trying to connect to management [2016-05-03 20:17:33] INFO - L#540 : leap.bitmask.services.eip.vpnprocess:_connectCb - Connected to management [2016-05-03 20:17:33] DEBUG - L#368 : leap.bitmask.gui.eip_status:set_eip_status - Waiting to start... [2016-05-03 20:17:34] DEBUG - L#597 : leap.bitmask.services.eip.vpnprocess:try_to_connect_to_management - trying to connect to management [2016-05-03 20:18:30] DEBUG - L#1376 : leap.bitmask.gui.mainwindow:_maybe_run_soledad_setup_checks - Provider does not offer MX, but it is enabled. [2016-05-03 20:18:33] INFO - L#886 : leap.bitmask.services.eip.vpnprocess:outReceived - Tue May 3 16:18:33 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Tue May 3 16:18:33 2016 TLS Error: TLS handshake failed Tue May 3 16:18:33 2016 SIGTERM[soft,tls-error] received, process exiting [2016-05-03 20:18:33] DEBUG - L#94 : leap.bitmask.services.eip.vpnprocess:watch - pattern matched! SIGTERM[soft,tls-error] [2016-05-03 20:18:33] DEBUG - L#272 : leap.bitmask.services.eip.conductor:_do_eip_failed - TLS Error: eip_stop (failed) [2016-05-03 20:18:33] DEBUG - L#58 : leap.bitmask.gui.statemachines:onEntry - State Encrypted Internet::off entered. Emitting signal ... [2016-05-03 20:18:33] DEBUG - L#897 : leap.bitmask.services.eip.vpnprocess:processExited - processExited, status 0 [2016-05-03 20:18:33] DEBUG - L#911 : leap.bitmask.services.eip.vpnprocess:processEnded - processEnded, status 0 [2016-05-03 20:18:33] INFO - L#298 : leap.bitmask.services.eip.conductor:_eip_finished - VPN process finished with exitCode 0... [2016-05-03 20:18:33] ERROR - L#365 : leap.bitmask.gui.eip_status:set_eip_status - Encrypted Internet finished in an unexpected manner! [2016-05-03 20:18:33] DEBUG - L#368 : leap.bitmask.gui.eip_status:set_eip_status - Bitmask is blocking unencrypted traffic.
If you need more infos, please ask. and it'll be my pleasure.
(from redmine: created on 2016-05-03)