tiz
Hi,
After migration to the new version of operating system and OpenVPN server looked like everything is OK but during the night the openvpn process simply stopped. I haven't found any reason for this, so I would appreciate any help that points me to the right direction.
We had the server working all day, serving a few (10) clients continuously without any problems. Also we had the setup itself working for years before the migration.
There is no other software on the server, I've checked the usual logs and found nothing.
Thank you,
Kind regards,
Istvan
Setup
OpenBSD 5.4
OpenVPN 2.3.1p2 (from OpenBSD packages)
Config
daemon
log-append /var/log/openvpn.log
user nobody
group nobody
port 1194
proto udp
dev tun1
fragment 1300
mssfix
ca ...
cert ...
key ...
dh ...
mode server
tls-server
ifconfig 192.168.192.1 192.168.192.2
push "route 192.168.192.1"
route 192.168.192.0 255.255.192.0
client-config-dir /etc/openvpn/ccd
ccd-exclusive
keepalive 10 30
persist-key
persist-tun
verb 4
Log
Tue Feb 11 02:34:33 2014 us=577090 client1/clientmachineip1:9710 VERIFY OK: depth=1, C=...here comes a DN...
Tue Feb 11 02:34:33 2014 us=577305 client1/clientmachineip1:9710 VERIFY OK: depth=0, C=...here comes a DN...
Tue Feb 11 02:34:33 2014 us=587475 client1/clientmachineip1:9710 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 02:34:33 2014 us=587509 client1/clientmachineip1:9710 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 02:34:33 2014 us=587577 client1/clientmachineip1:9710 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 02:34:33 2014 us=587604 client1/clientmachineip1:9710 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 02:34:33 2014 us=590986 client1/clientmachineip1:9710 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Feb 11 02:49:22 2014 us=792958 client2/clientmachineip2:1194 TLS: soft reset sec=0 bytes=99847/0 pkts=1124/0
Tue Feb 11 02:49:22 2014 us=880805 client2/clientmachineip2:1194 VERIFY OK: depth=1, C=...here comes a DN...
... manual restart ...
Tue Feb 11 08:13:44 2014 us=236963 Current Parameter Settings:
tiz
Update:
We've hit the same error again, so I've decided to switch back to the old server.
Tue Feb 11 09:13:45 2014 us=847007 client3/clientmachineip2:1194 VERIFY OK: depth=1, C=...here comes a DN...
Tue Feb 11 09:13:45 2014 us=847194 client3/clientmachineip2:1194 VERIFY OK: depth=0, C=...here comes a DN...
Tue Feb 11 09:13:45 2014 us=859399 client3/clientmachineip2:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 09:13:45 2014 us=859428 client3/clientmachineip2:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 09:13:45 2014 us=859494 client3/clientmachineip2:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 11 09:13:45 2014 us=859517 client3/clientmachineip2:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 11 09:13:45 2014 us=865127 client3/clientmachineip2:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Feb 11 09:13:48 2014 us=103001 client1/clientmachineip1:1754 TLS: soft reset sec=0 bytes=43076/0 pkts=712/0
Tue Feb 11 09:13:48 2014 us=169690 client1/clientmachineip1:1754 VERIFY OK: depth=1, C=...here comes a DN...
... server stops ...
