Notes »

Private Internet Access VPN won't connect!

Fixing Private Internet Access configuration

A few days ago I noticed my PIA VPN wasn't working. Today I finally got around to fixing it. Going off of hints in this reddit thread I was able to fix the error and warnings by adding a couple lines to disable IPv6.

Here's the error/warning messages I recieved:

$ sudo openvpn --config .config/pia-tcp/us_california.ovpn
doas (<user@host>) password:
2023-08-30 13:14:28 DEPRECATED OPTION: --cipher set to 'aes-128-cbc' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
2023-08-30 13:14:28 WARNING: file 'auth.txt' is group or others accessible
2023-08-30 13:14:28 OpenVPN 2.6.4 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2023-08-30 13:14:28 library versions: OpenSSL 3.1.2 1 Aug 2023, LZO 2.10
2023-08-30 13:14:28 DCO version: N/A
...
2023-08-30 13:14:28 TCP/UDP: Preserving recently used remote address: [AF_INET]191.96.106.103:502
2023-08-30 13:14:28 Attempting to establish TCP connection with [AF_INET]191.96.106.103:502
2023-08-30 13:14:28 TCP connection established with [AF_INET]191.96.106.103:502
2023-08-30 13:14:28 TCPv4_CLIENT link local: (not bound)
2023-08-30 13:14:28 TCPv4_CLIENT link remote: [AF_INET]191.96.106.103:502
2023-08-30 13:14:28 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2023-08-30 13:14:28 [losangeles434] Peer Connection Initiated with [AF_INET]191.96.106.103:502
2023-08-30 13:14:28 sitnl_send: rtnl: generic error (-101): Network is unreachable
2023-08-30 13:14:28 TUN/TAP device tun0 opened
2023-08-30 13:14:28 net_iface_mtu_set: mtu 1500 for tun0
2023-08-30 13:14:28 net_iface_up: set tun0 up
2023-08-30 13:14:28 net_addr_v4_add: 10.4.111.33/24 dev tun0
2023-08-30 13:14:28 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, therefore the route installation may fail or may not work as expected.
2023-08-30 13:14:28 add_route_ipv6(2000::/3 -> :: metric -1) dev tun0
2023-08-30 13:14:28 Initialization Sequence Completed

and I was able to fix it by editing the PIA supplied configs (works both with UDP and TCP configs):

pull-filter ignore "ifconfig-ipv6"
pull-filter ignore "route-ipv6"