asfak hi all, I am running openvpn 2.3.5 in a virtual server. I have around 1000 clients. Everything is working okay, unless my virtual HOST is running backup services which sometimes make the disk unavailable for a small amount of time. I have database running in the same server and during backup time it shows errors like some file can not be accessed. here is my vpn config: tls-server proto udp dev tun port 1200 server 10.0.0.0 255.255.255.0 ca ca.crt cert server.crt key server.key dh dh.pem tls-auth ta.key 0 group nogroup user nobody comp-lzo keepalive 60 180 persist-tun persist-key persist-local-ip persist-remote-ip cipher AES-256-CBC crl-verify crl.pem probably openvpn is trying to access some file in the disk(crl.pem ??) and failed. But i am wondering why VPN is crushing, is it a bug ? it would be interesting to know, which files are not loaded in openvpn during start up ?
asfak these are the few messages before last 2 crushing with verb4 Wed Jan 21 04:11:27 2015 217.71.44.133:49425 TLS: Initial packet from [AF_INET]217.71.44.133:49425, ls abda0094 Wed Jan 21 04:12:27 2015 217.71.44.133:49425 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivi$ Wed Jan 21 04:12:27 2015 217.71.44.133:49425 TLS Error: TLS handshake failed Wed Jan 21 04:12:27 2015 217.71.44.133:49425 SIGUSR1[soft,tls-error] received, client-instance restarting Wed Jan 21 04:17:28 2015 217.71.44.133:39053 TLS: Initial packet from [AF_INET]217.71.44.133:39053, sid=c1e2ae98 8bd7c006 Wed Jan 21 04:18:29 2015 217.71.44.133:39053 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivi$ Wed Jan 21 04:18:29 2015 217.71.44.133:39053 TLS Error: TLS handshake failed Wed Jan 21 04:18:29 2015 217.71.44.133:39053 SIGUSR1[soft,tls-error] received, client-instance restarting Wed Jan 21 04:23:35 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_CONTROL_V1) Wed Jan 21 04:23:36 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_CONTROL_V1) Wed Jan 21 04:23:39 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:41 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:42 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:42 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:43 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:44 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:44 2015 gw_client725/217.71.44.215:47255 TLS Error: Unroutable control packet received from [AF_INET]217.71.44.215:47255 (si=3 op=P_ACK_V1) Wed Jan 21 04:23:54 2015 gw_client725/217.71.44.215:47255 TLS: Initial packet from [AF_INET]217.71.44.215:47255, sid=d5691bb4 9f211a23 I read the vulnerability of 2.3.5. should i consider to go for openvpn-2.3.6 ? thanks.
Traffic asfak wrotethese are the few messages before last 2 crushing with verb4I presume you mean "crashing" ? Your log shows no server crash ... asfak wrote read the vulnerability of 2.3.5. should i consider to go for openvpn-2.3.6 ? Sure ..
