Could not connect to any server from vpngate.net

[KaustubhPatange]

General information

1. Android Version - 10
2. Android Vendor/Custom ROM - Stock
3. Device - Pixel 2
4. Version of the app (version number/play store version/self-built) - 0.7.33

Description of the issue

So I'm using your app "OpenVPN for Android" where I'm importing a config file from vpngate.net & it seems to be stuck at the "Waiting 2s between connection attempt" message. I've attached a demo config file to this issue so you can test yourself.

Configuration file

vpngate_public-vpn-162.opengw.net_tcp_443.ovpn.txt

[schwabe]

Please provide a log from the app.

[KaustubhPatange]

Here is the log,

2022-03-15 12:11:06 official build 0.7.33 running on Xiaomi POCO F1 (sdm845), Android 10 (QD1A.190821.014) API 29, ABI arm64-v8a, (google/walleye/walleye:8.1.0/OPM1.171019.011/4448085:user/release-keys)
2022-03-15 12:11:06 Building configuration…
2022-03-15 12:11:06 started Socket Thread
2022-03-15 12:11:06 Network Status: CONNECTED  to WIFI 
2022-03-15 12:11:06 Debug state info: CONNECTED  to WIFI , pause: userPause, shouldbeconnected: true, network: SHOULDBECONNECTED 
2022-03-15 12:11:06 Debug state info: CONNECTED  to WIFI , pause: userPause, shouldbeconnected: true, network: SHOULDBECONNECTED 
2022-03-15 12:11:06 P:WARNING: linker: Warning: "/data/app/de.blinkt.openvpn-27qyKvtA-ypT61brTXdzug==/lib/arm64/libovpnexec.so" is not a directory (ignoring)
2022-03-15 12:11:07 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 
2022-03-15 12:11:07 Current Parameter Settings:
2022-03-15 12:11:07   config = '/data/user/0/de.blinkt.openvpn/cache/android.conf'
2022-03-15 12:11:07   mode = 0
2022-03-15 12:11:07   show_ciphers = DISABLED
2022-03-15 12:11:07   show_digests = DISABLED
2022-03-15 12:11:07   show_engines = DISABLED
2022-03-15 12:11:07   genkey = DISABLED
2022-03-15 12:11:07   genkey_filename = '[UNDEF]'
2022-03-15 12:11:07   key_pass_file = '[UNDEF]'
2022-03-15 12:11:07   show_tls_ciphers = DISABLED
2022-03-15 12:11:07   connect_retry_max = 0
2022-03-15 12:11:07 Connection profiles [0]:
2022-03-15 12:11:07   proto = tcp-client
2022-03-15 12:11:07   local = '[UNDEF]'
2022-03-15 12:11:07   local_port = '[UNDEF]'
2022-03-15 12:11:07   remote = 'public-vpn-162.opengw.net'
2022-03-15 12:11:07   remote_port = '443'
2022-03-15 12:11:07   remote_float = DISABLED
2022-03-15 12:11:07   bind_defined = DISABLED
2022-03-15 12:11:07   bind_local = DISABLED
2022-03-15 12:11:07   bind_ipv6_only = DISABLED
2022-03-15 12:11:07   connect_retry_seconds = 2
2022-03-15 12:11:07   connect_timeout = 120
2022-03-15 12:11:07   socks_proxy_server = '[UNDEF]'
2022-03-15 12:11:07   socks_proxy_port = '[UNDEF]'
2022-03-15 12:11:07   tun_mtu = 1500
2022-03-15 12:11:07   tun_mtu_defined = ENABLED
2022-03-15 12:11:07   link_mtu = 1500
2022-03-15 12:11:07   link_mtu_defined = DISABLED
2022-03-15 12:11:07   tun_mtu_extra = 0
2022-03-15 12:11:07   tun_mtu_extra_defined = DISABLED
2022-03-15 12:11:07   mtu_discover_type = -1
2022-03-15 12:11:07   fragment = 0
2022-03-15 12:11:07   mssfix = 1492
2022-03-15 12:11:07   mssfix_encap = ENABLED
2022-03-15 12:11:07   explicit_exit_notification = 0
2022-03-15 12:11:07   tls_auth_file = '[UNDEF]'
2022-03-15 12:11:07   key_direction = not set
2022-03-15 12:11:07   tls_crypt_file = '[UNDEF]'
2022-03-15 12:11:07   tls_crypt_v2_file = '[UNDEF]'
2022-03-15 12:11:07 Connection profiles END
2022-03-15 12:11:07   remote_random = DISABLED
2022-03-15 12:11:07   ipchange = '[UNDEF]'
2022-03-15 12:11:07   dev = 'tun'
2022-03-15 12:11:07   dev_type = '[UNDEF]'
2022-03-15 12:11:07   dev_node = '[UNDEF]'
2022-03-15 12:11:07   lladdr = '[UNDEF]'
2022-03-15 12:11:07   topology = 1
2022-03-15 12:11:07   ifconfig_local = '[UNDEF]'
2022-03-15 12:11:07   ifconfig_remote_netmask = '[UNDEF]'
2022-03-15 12:11:07   ifconfig_noexec = DISABLED
2022-03-15 12:11:07   ifconfig_nowarn = ENABLED
2022-03-15 12:11:07   ifconfig_ipv6_local = '[UNDEF]'
2022-03-15 12:11:07   ifconfig_ipv6_netbits = 0
2022-03-15 12:11:07   ifconfig_ipv6_remote = '[UNDEF]'
2022-03-15 12:11:07   shaper = 0
2022-03-15 12:11:07   mtu_test = 0
2022-03-15 12:11:07   mlock = DISABLED
2022-03-15 12:11:07   keepalive_ping = 0
2022-03-15 12:11:07   keepalive_timeout = 0
2022-03-15 12:11:07   inactivity_timeout = 0
2022-03-15 12:11:07   ping_send_timeout = 0
2022-03-15 12:11:07   ping_rec_timeout = 0
2022-03-15 12:11:07   ping_rec_timeout_action = 0
2022-03-15 12:11:07   ping_timer_remote = DISABLED
2022-03-15 12:11:07   remap_sigusr1 = 0
2022-03-15 12:11:07   persist_tun = ENABLED
2022-03-15 12:11:07   persist_local_ip = DISABLED
2022-03-15 12:11:07   per

Basically, it goes on and on with "Waiting x secs", so I stopped at x = 32s!

[schwabe]

Your log is cut in half.

[KaustubhPatange]

Okay but I copied it from the 3 dots button & pasted directly here.

[schwabe]

But vpngate says it builds on SoftEther which sadly needs to be treated like OpenVPN 2.4, so try enabling compatibity with OpenVPN 2.4 under compatibility options.

[KaustubhPatange]

Sorry to say it doesn't work if you set OpenVPN 2.4 under compatibility options.

[YugiyO]

I also against this problem with OpenVPN in mibox and this problem still not fixed, even I try connect with the same config file that work on mobile and PC.

[YugiyO]

Here is the log, then it keeps showing “Waiting 2s seconds between connection attempt”

20 AM DEPRECATED OPTION: -cipher set to 'AES-128-CBC' but missing in -data-ciphers (AES-256-GCM AES:128-GCM CHACHA2O PO DerVPN innores acipher for cipher negotiations 9:20 AM OpenVPN 2 6-icsopenvpn (giticsopenvpn/v0.7.33-0-gBbc2287a] armeabi-v7a (SSL. (OpenSSL)] (LZO) ILZ4) (EPOLL) (MN/PATINFO, AE an 12 2022 20 AM Abrary versions: OpenSSL 3.0.1 14 Dec 2021, LZ0 2.10 120 AM WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.htmi#mitm for more info 20 AM TCP/UP: Preserving recently used remote address: (AF_INET)175.132.236.174:1935 9:20 AM UDP link local: (not bound) 9:20 AM UDP link remote: (AF_INET]175.132.236.174:1935 2:20 AM (* opengw.net) Peer Connection Initiated with (AF_INET]175.132.236.174:1935 3:20 AM OPTIONS ERROR: failed to negotiate cipher with server. Add the server's cipher (AES-128-CBC) to -data-ciphers (current) ¡AES-256-GCM.AES:128-GCM: CHACHA20-POLY1305) if you want to connect to this server. 9.20 AM ERROR: Failed to apply push options 9:20 AM Failed to open tun/tap interface 9:20 AM SIGUSR1(soft,process-push-msg-failed] received, process

[schwabe]

Yeah, you need to enable compatibility to old OpenVPN versions (2.4) under basic settings for this server. Please also report to the server admin that they upgrade their server to work with current OpenVPN versions.

[YugiyO]

Yeah, you need to enable compatibility to old OpenVPN versions (2.4) under basic settings for this server. Please also report to the server admin that they upgrade their server to work with current OpenVPN versions.

I don’t sure did you mean Use OpenVPN 3 Core(Use OpenVPN2.X) Option, If yes I have tried, and it doesn’t work and stuck in the loop of Assigning IP Adress message showing.

[schwabe]

Under Basic setting of each VPN, there is a compatiblity option. OpenVPN3 will have the same problem as it also does not support non AEAD ciphers out of the box anymore.

[KaustubhPatange]

For my case, I tried the same setting when connecting to a vpnpgate server. Set the compatibility mode to use "OpenVPN 2.4x peers" & it still did not work.

[searinminecraft]

OK, I know this issue is old, but for those who find it:

SoftEther (the software that runs the VPN Gate server) uses old OpenVPN, and uses old Cipher which results in the "Failed to negotiate cipher with server" error. Here is how to solve it:

1. Edit the vpngate profile you imported by clicking on pencil icon
2. Go to Authentication/Encryption tab
3. Scroll down, set Encryption Ciphers to AES-128-CBC

Hope this helps.