Hello Team,
I am facing VPN client issue on linux machine ubuntu 14. I am only facing for one openvpn client and other client are able to connect with vpn.
Firewall rule is enabled. Please find the server log and client log & server config as well as client config.
-------------------------------------------------------------------------
Server config:
port 443
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.172.0.0 255.255.0.0
#ifconfig-pool-persist ipp.txt
push "route 10.20.46.0 255.255.255.0"
push "route 10.20.33.0 255.255.255.0"
push "route 10.20.100.0 255.255.255.0"
push "route 10.20.30.0 255.255.255.0"
push "route 10.20.110.110 255.255.255.255"
push "route 10.20.44.26 255.255.255.255"
client-config-dir ccd
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/openvpn.log
verb 3
mute 20
ccd-exclusive
#sndbuf 0
#rcvbuf 0
#push "sndbuf 393216"
#push "rcvbuf 393216"
-----------------------------------------------------------------
Client config
client
dev tun
proto tcp
remote 8.8.8.125 443
resolv-retry infinite
nobind
user nobody
group users
persist-key
persist-tun
comp-lzo
verb 3
ca /etc/openvpn/sng-app-ccsensorwiprodavidson/keys/ca.crt
cert /etc/openvpn/sng-app-ccsensorwiprodavidson/keys/sng-app-ccsensorwiprodavidson.crt
key /etc/openvpn/sng-app-ccsensorwiprodavidson/keys/sng-app-ccsensorwiprodavidson.key
--------------------------------------------------------------------------------------------------------------------
Server log:
Thu Jul 5 04:20:53 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Jul 5 04:20:53 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Connection reset, restarting [0]
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 VERIFY OK: depth=0, C=US, ST=VA, L=Reston, O=Controlcase, OU=Infra, CN=sng-app-ccsensorwiprodavidson, emailAddress=
support@controlcase.com
Thu Jul 5 03:56:17 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 VERIFY OK: depth=1, C=US, ST=VA, L=Reston, O=Controlcase, OU=Infra, CN=Controlcase CA, name=Controlcase, emailAddress=
support@controlcase.com
Thu Jul 5 03:56:15 2018 sng-app-ccsensorwiprodavidson/12.41.100.137:47347 TLS: tls_process: killed expiring key
---------------------------------------------------------------------------------------------
client log
Mon Sep 10 12:31:08 2018 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
Mon Sep 10 12:31:08 2018 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
Mon Sep 10 12:31:08 2018 WARNING: file '/etc/openvpn/sng-app-ccsensorwiprodavidson/keys/sng-app-ccsensorwiprodavidson.key' is group or others accessible
Mon Sep 10 12:31:08 2018 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Sep 10 12:31:08 2018 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Mon Sep 10 12:31:08 2018 Attempting to establish TCP connection with [AF_INET]8.8.8.125:443 [nonblock]
Mon Sep 10 12:31:09 2018 TCP connection established with [AF_INET]8.8.8.125:443
Mon Sep 10 12:31:09 2018 TCPv4_CLIENT link local: [undef]
Mon Sep 10 12:31:09 2018 TCPv4_CLIENT link remote: [AF_INET]8.8.8.125:443
Mon Sep 10 12:31:09 2018 Connection reset, restarting [-1]
Mon Sep 10 12:31:09 2018 SIGUSR1[soft,connection-reset] received, process restarting
Mon Sep 10 12:31:09 2018 Restart pause, 5 second(s)
----------------------------------------------------------------------
