gluetun: Bug: NordVPN Credentials Wrong

Is this urgent?

Yes

Host OS

Ubuntu 20.04.4 LTS

CPU arch

x86_64

VPN service provider

NordVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2022-04-23T12:58:11.855Z (commit a1d70f7)

What’s the problem 🤔

Haven’t changed credentials, can still log into NordVPN app. Gluetun sporadically works with these creds.

Share your logs

2022-04-25T22:57:43Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2022-04-25T22:57:53Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]213.232.87.204:1194
2022-04-25T22:57:53Z INFO [openvpn] UDP link local: (not bound)
2022-04-25T22:57:53Z INFO [openvpn] UDP link remote: [AF_INET]213.232.87.204:1194
2022-04-25T22:57:55Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1582', remote='link-mtu 1634'
2022-04-25T22:57:55Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA512'
2022-04-25T22:57:55Z INFO [openvpn] [nl729.nordvpn.com] Peer Connection Initiated with [AF_INET]213.232.87.204:1194
2022-04-25T22:57:56Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED

Your credentials might be wrong 🤨

Share your configuration

No response

About this issue

Original URL
State: closed
Created 2 years ago
Reactions: 7
Comments: 41 (15 by maintainers)

Commits related to this issue

hotfix(nordvpn): use `aes-256-cbc` before GCM — committed to qdm12/gluetun by qdm12 2 years ago

Most upvoted comments

So this is fixed on qmcgaw/gluetun:latest right?

qdm12 on Apr 29, 2022

I switched to v3.28.2 and it is working for me as well.

Mereks on Apr 27, 2022

Awesome, thanks.

Please pull :964 again (digest sha256:2af979f02176dbc0d619840968a3892e422a3a962489e9e508b868433b2804ce), does it work? I re-added comp-lzo no but flipped the order of ciphers around from aes-256-gcm aes-256-cbc to aes-256-cbc aes-256-gcm.
If it doesn’t work, does that image work with -e OPENVPN_CIPHERS=aes-256-cbc (to remove the gcm variant)?
If that doesn’t work as well, does it work with -e OPENVPN_FLAGS="--comp-lzo"?

And that should finally nail down what’s the required settings for Nordvpn. Thanks in advance

qdm12 on Apr 28, 2022

Wanted to be extra sure, just switched back again to V3.28.2 and its good, I cant say what the issue is but that version works with my setup!

oenu on Apr 26, 2022

@oenu

Try with -e OPENVPN_CIPHERS=aes-256-cbc (to remove the gcm variant)?
If that doesn’t work as well, does it work with -e OPENVPN_FLAGS="--comp-lzo"?

You can mix and matching these two to see what combo works?

qdm12 on May 3, 2022

964 still not working for me. Could it have something to do with a1d70f7? I’d say that’s about the time it stopped working for me. Thanks in advance for all the help regardless!

Mereks on Apr 27, 2022

@qdm12 Just at work rn, have seen this, will report back

oenu on Apr 27, 2022

I was having the same issue starting yesterday. I did move to v3.28.2 and it seems to have fixed the issue for now.

starlord998 on Apr 27, 2022

Just switched to a server in the US on V3.28.2 and its working just fine, switched to latest and im getting the same

gluetun        | 2022-04-26T11:54:01-04:00 WARN [dns over tls] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: read udp 10.8.3.3:48375->1.1.1.1:53: i/o timeout
gluetun        | 2022-04-26T11:54:01-04:00 INFO [dns over tls] attempting restart in 20s

as before

oenu on Apr 26, 2022

Scratch that, just tried again with V3.28.2 (c04cd62) and its up, didnt change anything on my end

oenu on Apr 26, 2022