Management interface not working on tunnel device

thhart

I upgraded from 2.3.x to 2.4.x. Unfortunately the management is not reachable any more on the tunnel interface. Below is a comparison between tunnel and localhost. It looks like there is a problem with the port (see listening statement).

management tunnel 42000

Extract from log:

Tue Sep 24 12:49:57 2019 us=905518 management_addr = 'tunnel'
Tue Sep 24 12:49:57 2019 us=905523 management_port = '42000'
Tue Sep 24 12:49:57 2019 us=905529 management_user_pass = '/etc/openvpn/password'
Tue Sep 24 12:49:57 2019 us=905535 management_log_history_cache = 250
Tue Sep 24 12:49:57 2019 us=905540 management_echo_buffer_size = 100
Tue Sep 24 12:49:57 2019 us=905546 management_write_peer_info_file = '[UNDEF]'
Tue Sep 24 12:49:57 2019 us=905551 management_client_user = '[UNDEF]'
Tue Sep 24 12:49:57 2019 us=905557 management_client_group = '[UNDEF]'
Tue Sep 24 12:49:57 2019 us=905563 management_flags = 0
Tue Sep 24 12:49:57 2019 us=923353 MANAGEMENT: TCP Socket listening on [AF_INET]10.1.0.1:0

It is working with this:

management localhost 42000

Extract from log:

Tue Sep 24 12:52:18 2019 us=417126 management_addr = 'localhost'
Tue Sep 24 12:52:18 2019 us=417132 management_port = '42000'
Tue Sep 24 12:52:18 2019 us=417138 management_user_pass = '/etc/openvpn/password'
Tue Sep 24 12:52:18 2019 us=417143 management_log_history_cache = 250
Tue Sep 24 12:52:18 2019 us=417149 management_echo_buffer_size = 100
Tue Sep 24 12:52:18 2019 us=417155 management_write_peer_info_file = '[UNDEF]'
Tue Sep 24 12:52:18 2019 us=417161 management_client_user = '[UNDEF]'
Tue Sep 24 12:52:18 2019 us=417166 management_client_group = '[UNDEF]'
Tue Sep 24 12:52:18 2019 us=417172 management_flags = 0
Tue Sep 24 12:52:18 2019 us=418678 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:42000

TinCanTech

It is a known bug.

https://community.openvpn.net/openvpn/ticket/971

thhart

Cool, thanks for quick reply. I searched already but the words management and interface are hard to filter. ;-)

TinCanTech

thhart wrote I searched already but the words management and interface are hard to filter

That is exactly why google have a super computer track everything about you, so it can filter for you..

Some people don't like that and prefer the unfiltered version from duckduckgo 😃