Working until yesterday, now Unknown error (code = 10054)

vitangelo

Hi,
I have already installed an openvpn server on a raspberry pi 2 from a month, which I access from 4 clients, and that worked well until yesterday...
but today it always gives me error read UDP: Unknown error (code = 10054), I tried both connecting from the internet, and in local with local ip, and both from windows pc and from android, but nothing, always give me error code 10054, what can I verify, or what could have happened?
The connection with the raspberry works correctly, I have also done an apt-get update, but it has not solved.

dev tun
dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

server 10.7.0.0 255.255.255.0
#ifconfig-pool-persist /etc/openvpn/easy-rsa/ipp.txt

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
log-append /var/log/openvpn

persist-key
persist-tun
user nobody
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

server 10.7.0.0 255.255.255.0
#ifconfig-pool-persist /etc/openvpn/easy-rsa/ipp.txt

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
log-append /var/log/openvpn

persist-key
persist-tun
user nobody
group nogroup
status /var/log/openvpn-status.log
verb 3
client-to-client
topology subnet
comp-lzo
client-config-dir /etc/openvpn/ccd

dev tun
client
proto udp
remote nomesito.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert angelo.crt
key angelo.key
remote-cert-tls server
comp-lzo
verb 4

Thank you

bye bye

TinCanTech

vitangelo wrote read UDP: Unknown error (code = 10054),

Make sure your server is running.

vitangelo

I restarted several times, and the server is active

● openvpn.service - OpenVPN service
Loaded: loaded (/lib/systemd/system/openvpn.service; enabled; vendor preset: enabled)
Active: active (exited) since Mon 2018-02-26 12:58:08 CET; 39min ago
Process: 388 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
Main PID: 388 (code=exited, status=0/SUCCESS)
CGroup: /system.slice/openvpn.service

feb 26 12:58:08 VPNraspy systemd[1]: Starting OpenVPN service...
feb 26 12:58:08 VPNraspy systemd[1]: Started OpenVPN service.

😐

TinCanTech

Please set --verb 4 in your server config and post your server log.

vitangelo

Thanks for your interest,
seeing the log you suggested, I noticed that he is not updating it since this morning (6 hours ago), despite my various connection attempts, so there's something wrong ...

Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 TLS: Initial packet from [AF_INET]xxx.yyy.219.244:1024, sid=22f66yyy3 94ea2026
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 VERIFY OK: depth=1, C=IT, ST=NA, L=Napoli, O=xxx, OU=Sistemi, CN=VPNtim, name=EasyRSA, emailAddress=me@myhost.mydomain
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 VERIFY OK: depth=0, C=IT, ST=NA, L=Napoli, O=xxx, OU=MyOrganizationalUnit, CN=pcufficio, name=EasyRSA, emailAddress=me@myhost.mydomain
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_VER=2.4.4
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_PLAT=win
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_PROTO=2
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_NCP=2
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_LZ4=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_LZ4v2=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_LZO=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_COMP_STUB=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_COMP_STUBv2=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_TCPNL=1
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 peer info: IV_GUI_VER=OpenVPN_GUI_11
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 1024 bit RSA
Mon Feb 26 08:03:25 2018 xxx.yyy.219.244:1024 [pcufficio] Peer Connection Initiated with [AF_INET]xxx.yyy.219.244:1024
Mon Feb 26 08:03:25 2018 MULTI: new connection by client 'pcufficio' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Feb 26 08:03:25 2018 OPTIONS IMPORT: reading client specific options from: /etc/openvpn/ccd/pcufficio
Mon Feb 26 08:03:25 2018 MULTI: Learn: 10.7.0.10 -> pcufficio/xxx.yyy.219.244:1024
Mon Feb 26 08:03:25 2018 MULTI: primary virtual IP for pcufficio/xxx.yyy.219.244:1024: 10.7.0.10
Mon Feb 26 08:03:26 2018 pcufficio/xxx.yyy.219.244:1024 PUSH: Received control message: 'PUSH_REQUEST'
Mon Feb 26 08:03:26 2018 pcufficio/xxx.yyy.219.244:1024 SENT CONTROL [pcufficio]: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.7.0.1,topology subnet,route-gateway 10.7.0.1,ifconfig 10.7.0.10 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
Mon Feb 26 08:03:26 2018 pcufficio/xxx.yyy.219.244:1024 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Feb 26 08:03:26 2018 pcufficio/xxx.yyy.219.244:1024 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Feb 26 08:03:56 2018 zzz.www.72.108:11029 TLS: Initial packet from [AF_INET]zzz.www.72.108:11029, sid=c8591c3c 433b2741
Mon Feb 26 08:04:12 2018 zzz.www.82.75:29469 TLS: Initial packet from [AF_INET]zzz.www.82.75:29469, sid=fe0b23ca a9dedcxxx

Thanks

TinCanTech

vitangelo wrote MULTI: new connection by client 'pcufficio' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.

See --duplicate-cn in The Manual v24x