Problems installing ProtonVPN as client on RT-AC68U

[akwusmc]

Gentlemen,

I have an Asus RT-AC68U running -Merlin 384.10 and I'm having trouble getting ProtonVPN to install as a client.

I've been able to upload the .ovpn file and verified that it's been retained in the setup (I can click 'Edit' and see that there are CA and static keys in the correct fields, even though the setup page indicates 'No file selected'). After 'Applying' the settings I then try to turn the service 'On' but after the applying countdown the page returns with the service Off.

The System log returns this:

Apr 1 09:02:13 openvpn: Resetting client (unit 1) to default settings
Apr 1 09:04:23 rc_service: httpd 242:notify_rc start_vpnclient1
Apr 1 09:04:27 ovpn-client1[6195]: Multiple --up scripts defined. The previously configured script is overridden.
Apr 1 09:04:27 ovpn-client1[6195]: Options error: --up script fails with '/etc/openvpn/update-resolv-conf': No such file or directory (errno=2)
Apr 1 09:04:27 ovpn-client1[6195]: Options error: Please correct this error.
Apr 1 09:04:27 ovpn-client1[6195]: Use --help for more information.
​

I can ssh into the router and can try to see the contents of update-resolv-conf:

admin@Asus RT-AC68u:/#
admin@Asus RT-AC68u:/# cat /etc/openvpn/update-resolv-conf
cat: can't open '/etc/openvpn/update-resolv-conf': No such file or directory
​

I cannot navigate to /etc/ ...

admin@Asus RT-AC68u:/# cd etc
admin@Asus RT-AC68u:/tmp/etc#
​

I'm not a programmer, more of a 'woke' normie (OS is Ubuntu 18.04) so I'm not scared of getting into the CLI as long as I've got clear instructions.

I've also got a ticket in to ProtonVPN and r/Asus_Merlin but so far no help.

Any ideas are greatly appreciated!

a

Here are the settings from the VPN setup page:


Client instance: Client 1
Service state: Off
Automatic start at boot time: NO
Import .ovpn file: No file chosen (CA and static key import verified)
Interface type: TUN
Protocol: UDP
Server address and port: 207.244.109.182 5060 (these are straight out of the .ovpn file
Accept DNS Configuration: Relaxed
Create NAT on tunnel: Yes
Autorization mode: TLS
Username/Password Authentication: Yes
User name: **********
Password: ***********
Username/Password Auth only: Yes (Warning: You must define a Certificate Authority)
Keys and certificates: Verified to be uploaded
Cipher Negotiation: Enable (with fallback)
Negotiable ciphers: AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
Legacy/fallback cipher: AES-256-CBC
TLS control channel security: Outgoing Auth(1)
Auth digest: SHA512
Log verbosity: 3
Compression: None
TLS Regeneration Time: 0
Connection Retry Attempts: 15
Verify Server Certificate: No
Redirect internet traffic: No
Custom Configuration:
remote-random
resolv-retry infinite
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
remote-cert-tls server
pull
fast-io
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

​

 

[Martineau]

Apr  1 09:04:27 ovpn-client1[6195]: Multiple --up scripts defined.  The previously configured script is overridden.
Apr  1 09:04:27 ovpn-client1[6195]: Options error: --up script fails with '/etc/openvpn/update-resolv-conf': No such file or directory (errno=2)
Apr  1 09:04:27 ovpn-client1[6195]: Options error: Please correct this error.
Apr  1 09:04:27 ovpn-client1[6195]: Use --help for more information.

Remove these two lines from Custom Configuration:

up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

(The router uses its own internal UP/DOWN scripts, hence the conflict.)

If there are still problems, I would remove all of the Custom Config directives except for

remote-cert-tls server

 

[daviworld]

Remove these two lines from Custom Configuration:

up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

(The router uses its own internal UP/DOWN scripts, hence the conflict.)

If there are still problems, I would remove all of the Custom Config directives except for

remote-cert-tls server

I have ProtonVPN myself, and Martineau is correct. Everything outside of those last two lines and your client will begin working, after removing them. The rest of the custom config will be fine

 

[akwusmc]

Remove these two lines from Custom Configuration:

up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

(The router uses its own internal UP/DOWN scripts, hence the conflict.)

If there are still problems, I would remove all of the Custom Config directives except for

remote-cert-tls server

That did the trick! I also removed all but the remote-cert-tls server.

Thank you!