FireFox problems in Linux

So today I managed to set up a VPN on Fedora 22. I use premium VPN from Private Internet Access. I usually want to set the encryption level to maximum.

  Default Recommended Protection — AES-128 / SHA1 / RSA-2048

  All Speed No Safety — None / None / ECC-256k1

  Maximum Protection — AES-256 / SHA256 / RSA-4096

  Risky Business — AES-128 / None / RSA-2048

So the date encryption should be AES-256 CBC mode.
Data authentication should be HMAC SHA256
And Handshake should be RSA-4096 right?

But the OpenVPN client is not very flexible. I had to do everything manually. So is this set up correctly? Because the default settings were very different to this. I hope i didn't mess it up.

In the native PIA client it's dead easy. Click click click ....and it's done. In Linux I had to do all sorts of Terminal hackery.

EDIT: Ok, it's evident that something is wrong because, after restart VPN refuses to connect. Also Firefox keeps crashing whenever i try to play a video.

what do u get in the logs, they are very helpful if your not sure whats up.
peep in then on command line

less /var/log/syslog

then go way to the bottom and look for the openvpn stuff

No such file or directory.

try less /var/log/ (then press "tab" - it will spit out possible options.) u can post back the options. the files here vary based on os and version afik

$ less /var/log/
anaconda/                 dnf.log-20151215          httpd/
audit/                    dnf.log-20160115          journal/
boot.log                  dnf.rpm.log               lastlog
btmp                      dnf.rpm.log-20151029      libvirt/
btmp-20160115             dnf.rpm.log-20151215      ppp/
chrony/                   dnf.rpm.log-20160115      README
cluster/                  firewalld                 samba/
cups/                     gdm/                      speech-dispatcher/
dnf.librepo.log           glusterfs/                sssd/
dnf.librepo.log-20151029  grubby                    tallylog
dnf.librepo.log-20151215  hawkey.log                wpa_supplicant.log
dnf.librepo.log-20160115  hawkey.log-20151029       wtmp
dnf.log                   hawkey.log-20151215       
dnf.log-20151029          hawkey.log-20160115

EDIT: This also happened once when i rebooted.
fuck I can't upload it because it's over 2MB in size.

dnf.log and hawkey.log seem to be the best bet for finding whats up. check em to see if anything sticks out regarding openvpn errors

Jan 15 16:56:18 WARNING Package NetworkManager-openvpn-gnome-1:1.0.6-3.fc22.x86_64 is already installed, skipping.
Jan 15 16:56:18 DEBUG --> Starting dependency resolution
Jan 15 16:56:19 DEBUG --> Finished dependency resolution
Jan 15 16:56:19 DEBUG_2 timer: depsolve: 859 ms
Jan 15 16:56:19 INFO Dependencies resolved.
Jan 15 16:56:19 INFO Nothing to do.

Can't find anything else.

I also changed my root password. And that's when that crash happened. I have a picture of it but can't upload it.


...

The network manager vpn config should be pretty flexible. You should be able to just import .ovpn files. In fedora make sure your certificates are in the .pki folder. SELinux wont allow them to be used anywhere else (except maybe .cert)

1 Like

https://www.privateinternetaccess.com/forum/discussion/18894/pia-on-a-fedora-22-server This is the procedure i followed. And it worked fine until i changed my root password.

that is interesting. the logs u provided dont show any issues really. have u tries running the openvpn with the config file from cli. try it with -v flag so it spits out any errors

And how do i do that? I have no experience with the command line. I usually do things through GUI.

I recommend doing a but of reading from the source on the subject.
https://fedoraproject.org/wiki/Openvpn
https://ask.fedoraproject.org/en/question/7475/how-do-i-configure-openvpn-in-networkmanager-with-an-ovpn-configuration-file/

I really would just uninstall and purge OpenVPN, install cleanly, then just add the OpenVPN profile and cert through network manager.

Its really not worth doing all the fighting with a broken or corrupt profile. Which from just quick reading this sounds like.

And a Side note. Upgrade to F23 : P
You can upgrade with out reinstall now.
https://fedoraproject.org/wiki/DNF_system_upgrade

Fedora is a bleeding edge distro, its not really recommended to run an older version than the current full release that is receiving updates and bug fixes. If you are running this as a Server than I recommend going with CentOS 6 or 7 that have better LTS.

1 Like

Would you mind giving me some short instructions on how to do this. It's not that I'm lazy I just don't have a clue how to do it. I know how to set it up but not uninstall.

I don't want to. I bought the linux bible and it was based around RHEL or Fedora 21. By the time I got to use it F22 was out already. Also I'm using fedora because I want to pass the Red Hat certification. And become sys admin or server engineer.

If i could chose I would run something like Mint, Manjaro or OpenSuse.

If you want to pass your RHCS then you need to be running CentOS, not Fedora.
CentOS will be similar to RHEL, Fedora is a different animal. File Structure is not even the same.

You are having a bad experience with Fedora because you are running an outdated version of Fedora.
I would personally go to LinuxAcadamy.com for training for your RHCS. More up to date and better information.

I would be glad to help you with some commands, just working right now.
I'm off tomorrow.

Thanks for the info.

Go to JupiterBroadcastings site they have a code I think its 50 bux for 3 months. Super cheap.

Why would i need this? Btw... I went to the oldest version of kernel i had. Re-installed the OpenVPN again. It connected and I was able to load some pages but the youtube videos still wouldn't work. And when i tried to play a video from JupiterB FF crashed again. I think i will have to wipe it completely.

Seems like a good idea, I have always found the clients to be buggy.
Can't you just drop your config files into /etc/openvpn/. ?
Files normally are like .conf, maybe a .key file, from there start openvpn with
/etc/init.d/openvpn start or whatever it is in fedora.

Will try it in a vm.

the only file that's in the etc/openvpn/ folder is ca.crt