I've purchased a SSTP VPN subscription from StrongVPN.com, and followed their step by step instructions here to create the connection. Unfortunately I'm unable to connect in Ubuntu (it works perfectly in Windows 7), I contacted their technical support but they couldn't provide me with real help as they seem lacking Linux expertise.
Here is what I get in syslog when connection fails:
Also here is what I get when I try: sudo sstpc -log-level 5 -log-stderr -user <username> -password <password> server
sudo sstpc --log-level 5 --log-stderr --user XXXX --password XXXX vpn-sf40.reliablehosting.com
[sudo] password for anas:
Sep 27 16:09:55 sstpc[15410]: Resolved vpn-sf40.reliablehosting.com to 207.204.224.50
Sep 27 16:09:55 sstpc[15410]: Connected to vpn-sf40.reliablehosting.com
Sep 27 16:09:56 sstpc[15410]: The certificate did not match the host: vpn-sf40.reliablehosting.com
Sep 27 16:09:56 sstpc[15410]: Verification of server certificate failed
**Error: Verification of server certificate failed, (-2)
I also tried: NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug and here is the result:
** Message: nm-sstp-service (version 0.9.1) starting...
connection
name : "connection"
id : "StrongVPN" (s)
uuid : "5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1" (s)
type : "vpn" (s)
permissions : [] (sd)
autoconnect : FALSE (s)
timestamp : 0 (sd)
read-only : FALSE (sd)
zone : NULL (sd)
master : NULL (sd)
slave-type : NULL (sd)
vpn
name : "vpn"
service-type : "org.freedesktop.NetworkManager.sstp" (s)
user-name : "anas" (s)
data : [ { 'lcp-echo-interval': 30 }, { 'password-flags': 1 }, { 'user': XXXX }, { 'uuid': 5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1 }, { 'refuse-chap': yes }, { 'lcp-echo-failure': 5 }, { 'gateway': vpn-sf40.reliablehosting.com }, { 'refuse-pap': yes }, ] (s)
secrets : [ { 'password': XXXX }, ] (s)
ipv4
name : "ipv4"
method : "auto" (s)
dns : [134744072 (8.8.8.8), 67373064 (8.8.4.4)] (s)
dns-search : [] (sd)
addresses : [] (s)
routes : [] (s)
ignore-auto-routes : FALSE (sd)
ignore-auto-dns : TRUE (s)
dhcp-client-id : NULL (sd)
dhcp-send-hostname : TRUE (sd)
dhcp-hostname : NULL (sd)
never-default : FALSE (sd)
may-fail : TRUE (sd)
Plugin /usr/lib/pppd/2.4.5/nm-sstp-pppd-plugin.so loaded.** Message: pppd started with pid 15464
** Message: nm-sstp-ppp-plugin: (plugin_init): initializing
** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 3 / phase 'serial connection'
using channel 18
Using interface ppp0
Connect: ppp0 <--> /dev/pts/4
** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 5 / phase 'establish'
/usr/sbin/sstpc: unrecognized option '--uuid'
Script /usr/sbin/sstpc vpn-sf40.reliablehosting.com --nolaunchpppd --log-level 4 --ipparam nm-sstp-service-15460 --uuid 5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1 finished (pid 15466), status = 0xff
Modem hangup
** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 11 / phase 'disconnect'
Connection terminated.
** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 1 / phase 'dead'
** Message: nm-sstp-ppp-plugin: (nm_exit_notify): cleaning up
** (nm-sstp-service:15460): WARNING **: pppd exited with error code 16
Note: I obscured all usernames and passwords.
Hope I provided enough information to get my problem solved. Thanks in advance :)
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
Thank you for trying sstp-client and supporting the project. What happen if you tell sstpc to ignore certificate problems? I believe there is a checkbox in the NetworkManager applet to allow you to do that, or you can run sstpc on command line using -cert-warn (please check with the man page, I might have forgotten the exact option). Running it from command line you can append certain pppd options like debug noauth require-mschap-v2 refuse-eap.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I tried using -cert-warn from the command line, and it did the trick and I was able to connect, BUT a very weird thing happened, although it looked connected, my connections didn't pass through the VPN, I mean when checking my IP (in ipchicken.com for example) it's still the same, also still unable to access blocked websites in my country. Here is a sample log, what do you think?
Looks good, so the -cert-warn resolved it for you. The current problem has to do with routing and that you need a default route for you connection to work. You can append the 'defaultroute' option to the end of the command line and pppd will handle the default route option for you.
On the other hand, NetworkManager plugin for SSTP already supports to ignore the certificate warning and you can check this box if you trust the site. NetworkManager should automatically handle the default routes for you.
Good Luck!
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hello,
I've purchased a SSTP VPN subscription from StrongVPN.com, and followed their step by step instructions here to create the connection. Unfortunately I'm unable to connect in Ubuntu (it works perfectly in Windows 7), I contacted their technical support but they couldn't provide me with real help as they seem lacking Linux expertise.
Here is what I get in syslog when connection fails:
Also here is what I get when I try: sudo sstpc -log-level 5 -log-stderr -user <username> -password <password> server
I also tried: NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug and here is the result:
** Message: nm-sstp-service (version 0.9.1) starting... connection name : "connection" id : "StrongVPN" (s) uuid : "5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1" (s) type : "vpn" (s) permissions : [] (sd) autoconnect : FALSE (s) timestamp : 0 (sd) read-only : FALSE (sd) zone : NULL (sd) master : NULL (sd) slave-type : NULL (sd) vpn name : "vpn" service-type : "org.freedesktop.NetworkManager.sstp" (s) user-name : "anas" (s) data : [ { 'lcp-echo-interval': 30 }, { 'password-flags': 1 }, { 'user': XXXX }, { 'uuid': 5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1 }, { 'refuse-chap': yes }, { 'lcp-echo-failure': 5 }, { 'gateway': vpn-sf40.reliablehosting.com }, { 'refuse-pap': yes }, ] (s) secrets : [ { 'password': XXXX }, ] (s) ipv4 name : "ipv4" method : "auto" (s) dns : [134744072 (8.8.8.8), 67373064 (8.8.4.4)] (s) dns-search : [] (sd) addresses : [] (s) routes : [] (s) ignore-auto-routes : FALSE (sd) ignore-auto-dns : TRUE (s) dhcp-client-id : NULL (sd) dhcp-send-hostname : TRUE (sd) dhcp-hostname : NULL (sd) never-default : FALSE (sd) may-fail : TRUE (sd) Plugin /usr/lib/pppd/2.4.5/nm-sstp-pppd-plugin.so loaded.** Message: pppd started with pid 15464 ** Message: nm-sstp-ppp-plugin: (plugin_init): initializing ** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 3 / phase 'serial connection' using channel 18 Using interface ppp0 Connect: ppp0 <--> /dev/pts/4 ** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 5 / phase 'establish' /usr/sbin/sstpc: unrecognized option '--uuid' Script /usr/sbin/sstpc vpn-sf40.reliablehosting.com --nolaunchpppd --log-level 4 --ipparam nm-sstp-service-15460 --uuid 5faf115e-a1a5-4e3c-8e0f-aa9a647ffba1 finished (pid 15466), status = 0xff Modem hangup ** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 11 / phase 'disconnect' Connection terminated. ** Message: nm-sstp-ppp-plugin: (nm_phasechange): status 1 / phase 'dead' ** Message: nm-sstp-ppp-plugin: (nm_exit_notify): cleaning up ** (nm-sstp-service:15460): WARNING **: pppd exited with error code 16Note: I obscured all usernames and passwords.
Hope I provided enough information to get my problem solved. Thanks in advance :)
Hi,
Thank you for trying sstp-client and supporting the project. What happen if you tell sstpc to ignore certificate problems? I believe there is a checkbox in the NetworkManager applet to allow you to do that, or you can run sstpc on command line using -cert-warn (please check with the man page, I might have forgotten the exact option). Running it from command line you can append certain pppd options like debug noauth require-mschap-v2 refuse-eap.
Hi and sorry for the delay.
I tried using -cert-warn from the command line, and it did the trick and I was able to connect, BUT a very weird thing happened, although it looked connected, my connections didn't pass through the VPN, I mean when checking my IP (in ipchicken.com for example) it's still the same, also still unable to access blocked websites in my country. Here is a sample log, what do you think?
Looks good, so the -cert-warn resolved it for you. The current problem has to do with routing and that you need a default route for you connection to work. You can append the 'defaultroute' option to the end of the command line and pppd will handle the default route option for you.
On the other hand, NetworkManager plugin for SSTP already supports to ignore the certificate warning and you can check this box if you trust the site. NetworkManager should automatically handle the default routes for you.
Good Luck!