Librem tunnel on kubuntu: TLS key negotiation failed

Services Librem One
1

I tried to use librem tunnel on my kubuntu box. Setup was working fine and settings in network manager seem to be correct. However, when i try to activate the connection, nothing happens. Checking the journal gives this:

Aug 19 16:16:04 hp nm-openvpn[3022]: OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019
Aug 19 16:16:04 hp nm-openvpn[3022]: library versions: OpenSSL 1.1.1b  26 Feb 2019, LZO 2.10
Aug 19 16:16:04 hp nm-openvpn[3022]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 19 16:16:04 hp nm-openvpn[3022]: TCP/UDP: Preserving recently used remote address: [AF_INET]146.112.61.106:1198
Aug 19 16:16:04 hp nm-openvpn[3022]: UDP link local: (not bound)
Aug 19 16:16:04 hp nm-openvpn[3022]: UDP link remote: [AF_INET]146.112.61.106:1198
Aug 19 16:16:04 hp nm-openvpn[3022]: NOTE: chroot will be delayed because of --client, --pull, or --up-delay
Aug 19 16:16:04 hp nm-openvpn[3022]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Aug 19 16:16:14 hp systemd-resolved[457]: Server returned error NXDOMAIN, mitigating potential DNS violation DVE-2018-0001, retrying transaction with reduced feature level UDP.
Aug 19 16:17:04 hp nm-openvpn[3022]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug 19 16:17:04 hp nm-openvpn[3022]: TLS Error: TLS handshake failed
Aug 19 16:17:04 hp nm-openvpn[3022]: SIGUSR1[soft,tls-error] received, process restarting
Aug 19 16:17:04 hp NetworkManager[592]: <warn>  [1566224224.9190] vpn-connection[0x55dc3a72e2c0,9f6e13fc-275f-465c-9691-a4ce33d672e2,"hp@librem.one US1",0]: VPN connection: connect timeout exceeded.
Aug 19 16:17:04 hp nm-openvpn-serv[3019]: Connect timer expired, disconnecting.

The resolved message is not always there, so I guess it is not part of the problem. So I think it is boiling down to the TLS Error. Checking the web gives that either there is something wrong with the vpn server or something is blocking the connection to the vpn server.

I’ve checked my dd-wrt router and all the vpn passthrough boxes are enabled:
IPSec Passthrough Enable
PPTP Passthrough Enable
L2TP Passthrough Enable

My ISP says, he is blocking nothing.

So any ideas what might be causing the problem?

Best Regards,
Hans-Peter

2

tried to circumvent the network manager and called openvpn directly.

Gets stuck here:

Tue Aug 20 23:30:55 2019 us=141493 UDP WRITE [14] to [AF_INET]146.112.61.106:1198: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 20 23:30:57 2019 us=556673 UDP WRITE [14] to [AF_INET]146.112.61.106:1198: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 20 23:31:01 2019 us=178650 UDP WRITE [14] to [AF_INET]146.112.61.106:1198: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 20 23:31:09 2019 us=734818 UDP WRITE [14] to [AF_INET]146.112.61.106:1198: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 20 23:31:25 2019 us=291895 UDP WRITE [14] to [AF_INET]146.112.61.106:1198: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0

Then I copied the config to my linux mint pc and from there openvpn could establish the tunnel.
My mobile, attached to my lan, establishes the tunnel, too.

So I guess it has something to do with kubuntu.