[Bug 1230023] New: ProtonVPN-gui not working (problem with credentials)
https://bugzilla.suse.com/show_bug.cgi?id=1230023 Bug ID: 1230023 Summary: ProtonVPN-gui not working (problem with credentials) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs@suse.de Reporter: zb4ng@arcor.de QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- The Package ProtonVPN-gui that I installed with Yast doesn't work with openSUSE LEAP: I made a support request with ProtonVPN and they replied that ProtonVPN doesn't support openSUSE at all. The following is my original request with bug description: I'm using openSUSE Leap 15.6 with NetworkManager and I want to try the free version of ProtonVPN, so I installed it via the YaST SoftwareManagement, which is the usual way on openSUSE. This is the Proton VPN GUI-Client that was installed: Proton VPN: v1.12.0 (library: v3.7.0 / api-client: v0.7.1) However, I can't get it working, since the client demands credentials that I don't seem to have. In more detail this is what happens: I log into the client with my Proton Account. Then I try to connect to some server in the Netherlands. Then I have to enter my root password and afterwards my secrets (I assumed this is the OpenVPN / IKEv2 username/ password, I have also tried the Proton Account password). This is the text of the dialog: Title: "VPN secrets (openvpn) dialog - KDE Daemon" Text = "Authenticate ProtonVPN NL-FREE#299142 - Provide the secrets for the VPN connection 'ProtonVPN NL-FREE#299142': - A password is required:" Whatever I enter here, nothing works, the same dialog keeps popping up. I don't know password I need here other then the ones mentioned above. Moreover, when I shut ProtonVPN down, my internet isn't working anymore and - as I found out - DNS was missing, so I always have to delete the file that is created in the folder "/etc/NetworkManager/system-connections" and reboot. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 Chenzi Cao <chcao@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs@suse.de |alexandre.vicenzi@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c1 --- Comment #1 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- Firstly, there are two Proton VPN packages. Secondly, Proton VPN does not support openSUSE officially, and any request to their support will lead to the same reply. Thirdly, this is a known bug that Proton is aware but it has little priority to fix because it does not happen in Ubuntu (their official supported distro of choice). The packages available on Leap/SLE are deprecated (protonvpn-gui and protonvpn-cli), because they are based on the old Linux app which reached EOL in 2023 [1]. There's no guarantee that they will work in the future, and to be honest, they should be removed from future releases of openSUSE. The package available on Tumbleweed (proton-vpn) is currently maintained, but this does not work on Leap due to missing dependencies. From my understanding, the issue is related to this bug [2], and in theory, this happens on both versions of Proton VPN either on GNOME, KDE, or else. The solution is rather easy, unlock your keyring before using Proton VPN, as Proton fails to connect due to missing credentials locked in the keyring and asking for it while trying to connect. Another solution is, once you get a request for a password only type your user/root password, this will unlock the keyring. Cancel the current connection because it is already broken and click connect again. It should work now because the keyring has been unlocked. If the internet stops working, it is very likely that Kill Switch is enabled in the settings, if a connection fails it kills it entirely if this is enabled. Either disable this setting or cancel the current failed connection (if possible). [1]: https://github.com/ProtonVPN/linux-app [2] https://github.com/ProtonVPN/proton-vpn-gtk-app/issues/43 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c2 Alexandre Vicenzi <alexandre.vicenzi@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zb4ng@arcor.de Flags| |needinfo?(zb4ng@arcor.de) --- Comment #2 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- Can you test the new Proton VPN package on Leap 15.6? Theoretically, it should not have issues with credentials, authentication, and connections, but this version is still unstable IMHO and new errors can be found. You can install with:
zypper ar -ef https://download.opensuse.org/repositories/home:/avicenzi:/proton/15.6/ proton zypper in proton-vpn
The package is not yet available in the official repos, but I managed to get it working on Leap 15.6. This app replaces the old protonvpn-gui. I plan to submit it to Leap soon. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c3 zb4ng2 <zb4ng@arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(zb4ng@arcor.de) | --- Comment #3 from zb4ng2 <zb4ng@arcor.de> --- (In reply to Alexandre Vicenzi from comment #2)
Can you test the new Proton VPN package on Leap 15.6?
At first(In reply to Alexandre Vicenzi from comment #2)
Can you test the new Proton VPN package on Leap 15.6?
Theoretically, it should not have issues with credentials, authentication, and connections, but this version is still unstable IMHO and new errors can be found.
At first glance, it works perfectly! You can login with your normal Proton account and then you need the root password for the network changes. I haven't tested yet what happens if you switch it off, however. Great job ! -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c4 --- Comment #4 from zb4ng2 <zb4ng@arcor.de> --- Switching off worked also (i.e. the DNS problem didn't occur.) Some minor issue: one of my email accounts couldn't log in, but they might be just blocking VPNs... It would be nice, if you needn't enter the root password all the time, when connecting or disconnecting... -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c5 --- Comment #5 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- (In reply to zb4ng2 from comment #4)
Switching off worked also (i.e. the DNS problem didn't occur.)
Some minor issue: one of my email accounts couldn't log in, but they might be just blocking VPNs...
Not sure what this could be, I only have one Pro account to test.
It would be nice, if you needn't enter the root password all the time, when connecting or disconnecting...
The password prompt for network changes is due to openSUSE polkit policies, if you dislike that, you can tweak the policy to not require a password for such changes. This package is available in Tumbleweed already, but not yet on Leap. It has been tested by users, but I see issues from time to time, which is why I consider it unstable, plus the fact that the Proton team keeps changing this App frequently. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c6 --- Comment #6 from zb4ng2 <zb4ng@arcor.de> --- (In reply to Alexandre Vicenzi from comment #5)
(In reply to zb4ng2 from comment #4)
Switching off worked also (i.e. the DNS problem didn't occur.)
Some minor issue: one of my email accounts couldn't log in, but they might be just blocking VPNs...
Not sure what this could be, I only have one Pro account to test.
All I get is this error "name=pop3PasswordFailed" in thunderbird and I'm prompted to provide the password, but this doesn't help either. Maybe the server blocks IP addresses from a foreign region. Anyway it's just one email account I don't care much about, the other ones work fine.
It would be nice, if you needn't enter the root password all the time, when connecting or disconnecting...
The password prompt for network changes is due to openSUSE polkit policies, if you dislike that, you can tweak the policy to not require a password for such changes.
This package is available in Tumbleweed already, but not yet on Leap. It has been tested by users, but I see issues from time to time, which is why I consider it unstable, plus the fact that the Proton team keeps changing this App frequently. That would be really cool if it came to Leap! For now, I can live with the
It's just a convenience thing, maybe it's more secure to leave like that. package as you provided above. As an aside, I needed the VPN for the Incus package (see https://linuxcontainers.org/incus/) which is at the moment a pain to install on Leap. Is there a chance that this gets included ? -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c7 --- Comment #7 from Alexandre Vicenzi <alexandre.vicenzi@suse.com> --- (In reply to zb4ng2 from comment #6)
All I get is this error "name=pop3PasswordFailed" in thunderbird and I'm prompted to provide the password, but this doesn't help either. Maybe the server blocks IP addresses from a foreign region. Anyway it's just one email account I don't care much about, the other ones work fine.
For email, you possibly need the Proton Mail Bridge, not yet available on openSUSE AFAIK.
It's just a convenience thing, maybe it's more secure to leave like that.
It is just for networking, it would be safe if the computer is not shared with unknown people.
As an aside, I needed the VPN for the Incus package (see https://linuxcontainers.org/incus/) which is at the moment a pain to install on Leap. Is there a chance that this gets included ?
This has nothing to do with VPNs or this ticket. I suggest creating a new ticket requesting it. I don't use Incus, but Aleksa, who created it could potentially submit it. If you select the correct component (Containers) it will end up in Aleksa's team filter. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c8 zb4ng2 <zb4ng@arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #8 from zb4ng2 <zb4ng@arcor.de> --- ProtonVPN-gui is in the process of being replaced by new Proton VPN (for details see posts above) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1230023 https://bugzilla.suse.com/show_bug.cgi?id=1230023#c9 Aleksa Sarai <asarai@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |asarai@suse.com --- Comment #9 from Aleksa Sarai <asarai@suse.com> --- (In reply to Alexandre Vicenzi from comment #7)
(In reply to zb4ng2 from comment #6)
As an aside, I needed the VPN for the Incus package (see https://linuxcontainers.org/incus/) which is at the moment a pain to install on Leap. Is there a chance that this gets included ?
This has nothing to do with VPNs or this ticket. I suggest creating a new ticket requesting it. I don't use Incus, but Aleksa, who created it could potentially submit it. If you select the correct component (Containers) it will end up in Aleksa's team filter.
Incus has been submitted to Factory and Leap, we're just waiting for maintenance to accept the requests: * https://build.opensuse.org/requests/1225838 * https://build.opensuse.org/requests/1225848 -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com