Hi,
I have applied the configuration as stated on website of surfshark which i was using to connect my router as well to there VPN but i am unable to do so. I do not see any logs created. If i can know the logs of the connection why the connection is failing and why i am unable to connect that would be great.
Surfshark VPN not connecting
Re: Surfshark VPN not connecting
The location for log file is /var/log/messages
To contact our team, please send email to following addresses, remember to replace (at) with @
Technical team: support(at)terra-master.com (for technical support)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
Technical team: support(at)terra-master.com (for technical support)
Service team: service(at)terra-master.com (for purchasing, return, replacement, RMA service)
Re: Surfshark VPN not connecting
Hi ,
I attached the certificate and checked the log but its saying that the parameter is not supported by open vpn.
Oct 20 12:14:29 (none) openvpn[11601]: Options error: Unrecognized option or missing or extra parameter(s) in client_oSurfsharkUk:6: ca (2.4.4)
Oct 20 12:14:29 (none) openvpn[11601]: Use --help for more information.
I attached the certificate and checked the log but its saying that the parameter is not supported by open vpn.
Oct 20 12:14:29 (none) openvpn[11601]: Options error: Unrecognized option or missing or extra parameter(s) in client_oSurfsharkUk:6: ca (2.4.4)
Oct 20 12:14:29 (none) openvpn[11601]: Use --help for more information.
Re: Surfshark VPN not connecting
I somehow got in the shell terminal and used the open VPN command with the file and it seems to connect but i am not sure this is what i get:
[root@TNAS-015F62 SurfShark]# openvpn uk-lon-st001.prod.surfshark.com_udp.ovpn
Tue Oct 20 13:12:05 2020 OpenVPN 2.4.4 x86_64-tnas-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOL L] [MH/PKTINFO] [AEAD] built on Jul 24 2019
Tue Oct 20 13:12:05 2020 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10
Enter Auth Username:WxHpDjAhZC6XWjYzRePxUyzF
Enter Auth Password:
Tue Oct 20 13:12:15 2020 WARNING: --ping should normally be used with --ping-restart or --ping -exit
Tue Oct 20 13:12:15 2020 Outgoing Control Channel Authentication: Using 512 bit message hash ' SHA512' for HMAC authentication
Tue Oct 20 13:12:15 2020 Incoming Control Channel Authentication: Using 512 bit message hash ' SHA512' for HMAC authentication
Tue Oct 20 13:12:15 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]217.146.82 .83:1194
Tue Oct 20 13:12:15 2020 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Oct 20 13:12:15 2020 UDP link local: (not bound)
Tue Oct 20 13:12:15 2020 UDP link remote: [AF_INET]217.146.82.83:1194
Tue Oct 20 13:12:15 2020 TLS: Initial packet from [AF_INET]217.146.82.83:1194, sid=95a1d0a2 4c 9fab66
Tue Oct 20 13:12:15 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=2, C=VG, O=Surfshark, CN=Surfshark Root CA
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=1, C=VG, O=Surfshark, CN=Surfshark Intermediate CA
Tue Oct 20 13:12:15 2020 VERIFY KU OK
Tue Oct 20 13:12:15 2020 Validating certificate extended key usage
Tue Oct 20 13:12:15 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects T LS Web Server Authentication
Tue Oct 20 13:12:15 2020 VERIFY EKU OK
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=0, CN=uk-lon-st001.prod.surfshark.com
Tue Oct 20 13:12:15 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', re mote='link-mtu 1581'
Tue Oct 20 13:12:15 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
Tue Oct 20 13:12:15 2020 WARNING: 'auth' is used inconsistently, local='auth SHA512', remote=' auth [null-digest]'
Tue Oct 20 13:12:15 2020 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA 384, 2048 bit RSA
Tue Oct 20 13:12:15 2020 [uk-lon-st001.prod.surfshark.com] Peer Connection Initiated with [AF_ INET]217.146.82.83:1194
Tue Oct 20 13:12:16 2020 SENT CONTROL [uk-lon-st001.prod.surfshark.com]: 'PUSH_REQUEST' (statu s=1)
Tue Oct 20 13:12:21 2020 SENT CONTROL [uk-lon-st001.prod.surfshark.com]: 'PUSH_REQUEST' (statu s=1)
Tue Oct 20 13:12:21 2020 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 162.252.1 72.57,dhcp-option DNS 149.154.159.92,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,explici t-exit-notify,block-outside-dns,route-gateway 10.8.8.1,topology subnet,ping 60,ping-restart 18 0,ifconfig 10.8.8.48 255.255.255.0,peer-id 46,cipher AES-256-GCM'
Tue Oct 20 13:12:21 2020 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:6 is ignored by previ ous <connection> blocks
Tue Oct 20 13:12:21 2020 Options error: Unrecognized option or missing or extra parameter(s) i n [PUSH-OPTIONS]:7: block-outside-dns (2.4.4)
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: explicit notify parm(s) modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Tue Oct 20 13:12:21 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: route options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: route-related options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: peer-id set
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: adjusting link_mtu to 1656
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: data channel crypto options modified
Tue Oct 20 13:12:21 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Oct 20 13:12:21 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Oct 20 13:12:21 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Oct 20 13:12:21 2020 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=6c:bf:b5:01 :5f:62
Tue Oct 20 13:12:21 2020 TUN/TAP device tun0 opened
Tue Oct 20 13:12:21 2020 TUN/TAP TX queue length set to 100
Tue Oct 20 13:12:21 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Oct 20 13:12:21 2020 /sbin/ip link set dev tun0 up mtu 1500
Tue Oct 20 13:12:21 2020 /sbin/ip addr add dev tun0 10.8.8.48/24 broadcast 10.8.8.255
Tue Oct 20 13:12:21 2020 /sbin/ip route add 217.146.82.83/32 via 192.168.1.1
Tue Oct 20 13:12:21 2020 /sbin/ip route add 0.0.0.0/1 via 10.8.8.1
Tue Oct 20 13:12:21 2020 /sbin/ip route add 128.0.0.0/1 via 10.8.8.1
Tue Oct 20 13:12:21 2020 Initialization Sequence Completed
adasda^CTue Oct 20 13:17:12 2020 event_wait : Interrupted system call (code=4)
Tue Oct 20 13:17:12 2020 SIGTERM received, sending exit notification to peer
Tue Oct 20 13:17:13 2020 /sbin/ip route del 217.146.82.83/32
Tue Oct 20 13:17:13 2020 /sbin/ip route del 0.0.0.0/1
Tue Oct 20 13:17:13 2020 /sbin/ip route del 128.0.0.0/1
Tue Oct 20 13:17:13 2020 Closing TUN/TAP interface
Tue Oct 20 13:17:13 2020 /sbin/ip addr del dev tun0 10.8.8.48/24
Tue Oct 20 13:17:13 2020 SIGTERM[soft,exit-with-notification] received, process exiting
And after that the TOS says i am connected to VPN. But i am not able to connect using the TOS interface and i have to give user name and password again and again to connect please help?
[root@TNAS-015F62 SurfShark]# openvpn uk-lon-st001.prod.surfshark.com_udp.ovpn
Tue Oct 20 13:12:05 2020 OpenVPN 2.4.4 x86_64-tnas-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOL L] [MH/PKTINFO] [AEAD] built on Jul 24 2019
Tue Oct 20 13:12:05 2020 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10
Enter Auth Username:WxHpDjAhZC6XWjYzRePxUyzF
Enter Auth Password:
Tue Oct 20 13:12:15 2020 WARNING: --ping should normally be used with --ping-restart or --ping -exit
Tue Oct 20 13:12:15 2020 Outgoing Control Channel Authentication: Using 512 bit message hash ' SHA512' for HMAC authentication
Tue Oct 20 13:12:15 2020 Incoming Control Channel Authentication: Using 512 bit message hash ' SHA512' for HMAC authentication
Tue Oct 20 13:12:15 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]217.146.82 .83:1194
Tue Oct 20 13:12:15 2020 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Oct 20 13:12:15 2020 UDP link local: (not bound)
Tue Oct 20 13:12:15 2020 UDP link remote: [AF_INET]217.146.82.83:1194
Tue Oct 20 13:12:15 2020 TLS: Initial packet from [AF_INET]217.146.82.83:1194, sid=95a1d0a2 4c 9fab66
Tue Oct 20 13:12:15 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=2, C=VG, O=Surfshark, CN=Surfshark Root CA
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=1, C=VG, O=Surfshark, CN=Surfshark Intermediate CA
Tue Oct 20 13:12:15 2020 VERIFY KU OK
Tue Oct 20 13:12:15 2020 Validating certificate extended key usage
Tue Oct 20 13:12:15 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects T LS Web Server Authentication
Tue Oct 20 13:12:15 2020 VERIFY EKU OK
Tue Oct 20 13:12:15 2020 VERIFY OK: depth=0, CN=uk-lon-st001.prod.surfshark.com
Tue Oct 20 13:12:15 2020 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1633', re mote='link-mtu 1581'
Tue Oct 20 13:12:15 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
Tue Oct 20 13:12:15 2020 WARNING: 'auth' is used inconsistently, local='auth SHA512', remote=' auth [null-digest]'
Tue Oct 20 13:12:15 2020 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA 384, 2048 bit RSA
Tue Oct 20 13:12:15 2020 [uk-lon-st001.prod.surfshark.com] Peer Connection Initiated with [AF_ INET]217.146.82.83:1194
Tue Oct 20 13:12:16 2020 SENT CONTROL [uk-lon-st001.prod.surfshark.com]: 'PUSH_REQUEST' (statu s=1)
Tue Oct 20 13:12:21 2020 SENT CONTROL [uk-lon-st001.prod.surfshark.com]: 'PUSH_REQUEST' (statu s=1)
Tue Oct 20 13:12:21 2020 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 162.252.1 72.57,dhcp-option DNS 149.154.159.92,redirect-gateway def1,sndbuf 524288,rcvbuf 524288,explici t-exit-notify,block-outside-dns,route-gateway 10.8.8.1,topology subnet,ping 60,ping-restart 18 0,ifconfig 10.8.8.48 255.255.255.0,peer-id 46,cipher AES-256-GCM'
Tue Oct 20 13:12:21 2020 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:6 is ignored by previ ous <connection> blocks
Tue Oct 20 13:12:21 2020 Options error: Unrecognized option or missing or extra parameter(s) i n [PUSH-OPTIONS]:7: block-outside-dns (2.4.4)
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: timers and/or timeouts modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: explicit notify parm(s) modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Tue Oct 20 13:12:21 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --ifconfig/up options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: route options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: route-related options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: peer-id set
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: adjusting link_mtu to 1656
Tue Oct 20 13:12:21 2020 OPTIONS IMPORT: data channel crypto options modified
Tue Oct 20 13:12:21 2020 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Oct 20 13:12:21 2020 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Oct 20 13:12:21 2020 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Oct 20 13:12:21 2020 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=6c:bf:b5:01 :5f:62
Tue Oct 20 13:12:21 2020 TUN/TAP device tun0 opened
Tue Oct 20 13:12:21 2020 TUN/TAP TX queue length set to 100
Tue Oct 20 13:12:21 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Oct 20 13:12:21 2020 /sbin/ip link set dev tun0 up mtu 1500
Tue Oct 20 13:12:21 2020 /sbin/ip addr add dev tun0 10.8.8.48/24 broadcast 10.8.8.255
Tue Oct 20 13:12:21 2020 /sbin/ip route add 217.146.82.83/32 via 192.168.1.1
Tue Oct 20 13:12:21 2020 /sbin/ip route add 0.0.0.0/1 via 10.8.8.1
Tue Oct 20 13:12:21 2020 /sbin/ip route add 128.0.0.0/1 via 10.8.8.1
Tue Oct 20 13:12:21 2020 Initialization Sequence Completed
adasda^CTue Oct 20 13:17:12 2020 event_wait : Interrupted system call (code=4)
Tue Oct 20 13:17:12 2020 SIGTERM received, sending exit notification to peer
Tue Oct 20 13:17:13 2020 /sbin/ip route del 217.146.82.83/32
Tue Oct 20 13:17:13 2020 /sbin/ip route del 0.0.0.0/1
Tue Oct 20 13:17:13 2020 /sbin/ip route del 128.0.0.0/1
Tue Oct 20 13:17:13 2020 Closing TUN/TAP interface
Tue Oct 20 13:17:13 2020 /sbin/ip addr del dev tun0 10.8.8.48/24
Tue Oct 20 13:17:13 2020 SIGTERM[soft,exit-with-notification] received, process exiting
And after that the TOS says i am connected to VPN. But i am not able to connect using the TOS interface and i have to give user name and password again and again to connect please help?