kidc4sh
Hello everyone, I will tell you about my problem, but first of all I would like to tell you that I could solve my problem alone by trying the various solutions I found on the internet. Here is the context: I put this server about 1 month and a half ago, I have 4 clients connected to this VPN since then, then 13 days ago, for no reason, all customers have not connect to the server.
My tracks: RTNETLINK file exists;
port 1194: would already be used?
Do these errors refer to the TLS key and Handshake?
This is not a self-service server, is not a self-make-the-time-of-one
Looking at the logs
Thu Jun 13 12:29:50 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]XX.XXX.XX.XX:1194
Socket Buffers: R=[65536->65536] S=[65536->65536]
UDP link local: (not bound)
UDP link remote: [AF_INET]XX.XXX.XX.XX:1194
MANAGEMENT: >STATE:1560421790,WAIT,,,,,,
MANAGEMENT: >STATE:1560421790,AUTH,,,,,,
TLS: Initial packet from [AF_INET]XX.XXX.XX.XX:1194, sid=3b9cfc5f 560b2c9e
VERIFY OK: depth=1, CN=Easy-RSA CA
VERIFY KU OK
Validating certificate extended key usage
++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
VERIFY EKU OK
VERIFY OK: depth=0, CN=server
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, process restarting
MANAGEMENT: >STATE:1560421850,RECONNECTING,tls-error,,,,,
Then looking at the server configuration file:
Thu Jun 13 12:49:19 2019 library versions: OpenSSL 1.1.1b 26 Feb 2019, LZO 2.08
Diffie-Hellman initialized with 2048 bit key
Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
ROUTE_GATEWAY XXX.XXX.XXX.1
TUN/TAP device tun1 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun1 up mtu 1500
/sbin/ip addr add dev tun1 local 10.8.0.1 peer 10.8.0.2
/sbin/ip route add 10.8.0.0/24 via 10.8.0.2
RTNETLINK answers: File exists
ERROR: Linux route add command failed: external program exited with error status: 2
Could not determine IPv4/IPv6 protocol. Using AF_INET
Socket Buffers: R=[212992->212992] S=[212992->212992]
TCP/UDP: Socket bind failed on local address [AF_INET][undef]:1194: Address already in use (errno=98)
Exiting due to fatal error
Closing TUN/TAP interface
/sbin/ip addr del dev tun1 local 10.8.0.1 peer 10.8.0.2
Fin
Here is my configuration
Ubuntu server 18.04.2 LTS
OpenVPN Open VPN 2.4.4
Thank you for reading me, and thank you for the help you give to beginners like me
- This message has been translated from french to english, sorry if you find some error :oops:
kidc4sh
Okay that's what i thought. How i fix this problem
i tried those commands
sudo netstat -peanut | grep ":1194"
udp 0 0 0.0.0.0:1194 0.0.0.0:* 0 18336 905/openvpn
sudo lsof -i -P -n | grep "1194"
openvpn 905 nobody 7u IPv4 18336 0t0 UDP *:1194
sudo ufw status
Status: active
To Action From
-- ------ ----
OpenSSH ALLOW Anywhere
Apache Full ALLOW Anywhere
1194/udp ALLOW Anywhere
443 ALLOW Anywhere
1194 ALLOW Anywhere
OpenSSH (v6) ALLOW Anywhere (v6)
Apache Full (v6) ALLOW Anywhere (v6)
1194/udp (v6) ALLOW Anywhere (v6)
443 (v6) ALLOW Anywhere (v6)
1194 (v6) ALLOW Anywhere (v6)
kidc4sh
ps -ef | grep openvpn
nobody 905 1 0 juin12 ? 00:00:31 /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --script-security 2 --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid
kid 13262 13240 0 11:31 pts/0 00:00:00 grep --color=auto openvpn
kidc4sh
I found nothing to help me on that How to ..
I checked that "nobody" is the user i set on my server.conf file
But apparently that is the only user ?
I tried to type this command to compare them
sudo netstat -peanut | grep ":443"
tcp6 0 0 :::443 :::* LISTEN 0 2433239 9817/apache2
sudo netstat -peanut | grep ":1194"
udp 0 0 0.0.0.0:1194 0.0.0.0:* 0 18336 905/openvpn
No one listen that damn :1994.
How can i see who use this port ? How can i release it ? :oops:
