Replaced Certs, Getting Resource Limit Error

WattsToo

I have set up an OVPN server on a Mikrotik RB33G, and I have the 2.4.9 client running on 5 different Windows 10 PCs. Everything was working fine until I discovered today that the certs expired last week. I deleted the old certs, generated new ones, and exported them from the Mikrotik board. I then copied them over to the config folder on three of the laptops and I recieved the same error on all three.

Error: Windows resource limit WSA_MAXIMUM_WAIT_EVENTS (64) has been exceeded.

I have 5 clients, none are connected save for the one at a time testing I have been doing, and the only change is the expired/replaced certs. I made sure to name the new certs the same as the old certs. I have been searching online for a solution but the error indicates more connections are required or UDP should be used, however, everything was working as is prior to the certs.

TinCanTech

Please see https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

WattsToo

Thank you for the guidance, TinCanTech.

Server Config (the server is a Mikrotik RB33G, so the config is limited)
# feb/10/2022 13:44:58 by RouterOS 6.46.7
# software id = 52TG-AIGA
#
# model = RBD52G-5HacD2HnD
# serial number = CDFE0C72384C
/interface ovpn-server server
set auth=sha1 cipher=aes256 enabled=yes require-client-certificate=yes
/ppp secret
add local-address=192.168.88.1 name=[REMOVED] password=\
[REMOVED] remote-address=192.168.88.11 service=ovpn
add local-address=192.168.88.1 name=[REMOVED] password=\
[REMOVED] remote-address=192.168.88.12 service=ovpn
add local-address=192.168.88.1 name=[REMOVED] password=\
[REMOVED] remote-address=192.168.88.13 service=ovpn
add local-address=192.168.88.1 name=[REMOVED] password=\
[REMOVED] remote-address=192.168.88.14 service=ovpn

Server Log

# feb/10/2022 15:56:41 by RouterOS 6.46.7
# software id = 52TG-AIGA
#
15:55:34 ovpn,info TCP connection established from 192.168.88.237 
15:55:34 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=e6fecf6dca58d0 pid=0 DATA len=0 
15:55:35 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=18e2c136ccbf8da pid=0 DATA len=0 
15:55:35 ovpn,debug,packet sent P_ACK kid=0 sid=e6fecf6dca58d0 [0 sid=18e2c136ccbf8da] DATA len=0 
15:55:35 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=18e2c136ccbf8da [0 sid=e6fecf6dca58d0] pid=0 DATA len=0 
15:55:35 ovpn,debug,error,l2tp,59632,1304,59632,39596,964,60912,l2tp,info,60916,debug duplicate packet, dropping 
15:55:35 ovpn,debug <192.168.88.237>: disconnected <TLS failed> 
15:55:40 ovpn,info TCP connection established from 192.168.88.237 
15:55:40 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=6e21827c2df76b7 pid=0 DATA len=0 
15:55:41 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=0a4262c8fffa7d23 pid=0 DATA len=0 
15:55:41 ovpn,debug,packet sent P_ACK kid=0 sid=6e21827c2df76b7 [0 sid=0a4262c8fffa7d23] DATA len=0 
15:55:41 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=0a4262c8fffa7d23 [0 sid=6e21827c2df76b7] pid=0 DATA len=0 
15:55:41 ovpn,debug,error,l2tp,59632,1304,59632,39596,964,60912,l2tp,info,60916,debug duplicate packet, dropping 
15:55:41 ovpn,debug <192.168.88.237>: disconnected <TLS failed> 
15:55:47 ovpn,info TCP connection established from 192.168.88.237 
15:55:47 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=16b1f8354fd1aa77 pid=0 DATA len=0 
15:55:48 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=c32aef4de6e2a pid=0 DATA len=0 
15:55:48 ovpn,debug,packet sent P_ACK kid=0 sid=16b1f8354fd1aa77 [0 sid=c32aef4de6e2a] DATA len=0 
15:55:48 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=c32aef4de6e2a [0 sid=16b1f8354fd1aa77] pid=0 DATA len=0 
15:55:48 ovpn,debug,error,l2tp,59632,1304,59632,39596,964,60912,l2tp,info,60916,debug duplicate packet, dropping 
15:55:48 ovpn,debug <192.168.88.237>: disconnected <TLS failed> 
15:55:53 ovpn,info TCP connection established from 192.168.88.237 
15:55:53 ovpn,debug,packet sent P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=11da354f969d0ef pid=0 DATA len=0 
15:55:54 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=9b949a873b82d5c4 pid=0 DATA len=0 
15:55:54 ovpn,debug,packet sent P_ACK kid=0 sid=11da354f969d0ef [0 sid=9b949a873b82d5c4] DATA len=0 
15:55:54 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=9b949a873b82d5c4 [0 sid=11da354f969d0ef] pid=0 DATA len=0 
15:55:54 ovpn,debug,error,l2tp,59632,1304,59632,39596,964,60912,l2tp,info,60916,debug duplicate packet, dropping 
15:55:54 ovpn,debug <192.168.88.237>: disconnected <TLS failed> 
15:56:11 dhcp,info defconf deassigned 192.168.88.90 from 46:EF:A7:CC:FC:09 
15:56:27 system,info,account user admin logged in via local 
15:56:38 dhcp,info defconf assigned 192.168.88.90 to 46:EF:A7:CC:FC:09

Client Config

#Template client.ovpnclient
client
dev tun
proto tcp-client
remote x.x.x.x
port 1194
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
ca [CaCertName].crt
cert [ClientCertName].crt
key [ClientKeyName].key
verb 4
mute 10
cipher AES-256-CBC
auth SHA1
auth-user-pass secret
auth-nocache

Client Log

Thu Feb 10 14:50:16 2022 us=856209 Current Parameter Settings:
Thu Feb 10 14:50:16 2022 us=856209   config = 'client.ovpn'
Thu Feb 10 14:50:16 2022 us=856209   mode = 0
Thu Feb 10 14:50:16 2022 us=856209   show_ciphers = DISABLED
Thu Feb 10 14:50:16 2022 us=856209   show_digests = DISABLED
Thu Feb 10 14:50:16 2022 us=856209   show_engines = DISABLED
Thu Feb 10 14:50:16 2022 us=856209   genkey = DISABLED
Thu Feb 10 14:50:16 2022 us=856209   key_pass_file = '[UNDEF]'
Thu Feb 10 14:50:16 2022 us=856209   show_tls_ciphers = DISABLED
Thu Feb 10 14:50:16 2022 us=856209   connect_retry_max = 0
Thu Feb 10 14:50:16 2022 us=856209 NOTE: --mute triggered...
Thu Feb 10 14:50:16 2022 us=856209 285 variation(s) on previous 10 message(s) suppressed by --mute
Thu Feb 10 14:50:16 2022 us=856209 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Thu Feb 10 14:50:16 2022 us=856209 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Feb 10 14:50:16 2022 us=856209 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Enter Management Password:
Thu Feb 10 14:50:16 2022 us=871853 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Feb 10 14:50:16 2022 us=871853 Need hold release from management interface, waiting...
Thu Feb 10 14:50:17 2022 us=252120 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Feb 10 14:50:17 2022 us=361498 MANAGEMENT: CMD 'state on'
Thu Feb 10 14:50:17 2022 us=361498 MANAGEMENT: CMD 'log all on'
Thu Feb 10 14:50:17 2022 us=423974 MANAGEMENT: CMD 'echo all on'
Thu Feb 10 14:50:17 2022 us=423974 MANAGEMENT: CMD 'bytecount 5'
Thu Feb 10 14:50:17 2022 us=439598 MANAGEMENT: CMD 'hold off'
Thu Feb 10 14:50:17 2022 us=439598 MANAGEMENT: CMD 'hold release'
Thu Feb 10 14:50:17 2022 us=455222 MANAGEMENT: CMD 'password [...]'
Thu Feb 10 14:50:17 2022 us=455222 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb 10 14:50:17 2022 us=470849 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb 10 14:50:17 2022 us=470849 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Thu Feb 10 14:50:17 2022 us=470849 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Thu Feb 10 14:50:17 2022 us=470849 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:17 2022 us=470849 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 10 14:50:17 2022 us=470849 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Thu Feb 10 14:50:17 2022 us=470849 MANAGEMENT: >STATE:1644519017,TCP_CONNECT,,,,,,
Thu Feb 10 14:50:18 2022 us=471081 TCP connection established with [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:18 2022 us=471081 TCP_CLIENT link local: (not bound)
Thu Feb 10 14:50:18 2022 us=471081 TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:18 2022 us=471081 MANAGEMENT: >STATE:1644519018,WAIT,,,,,,
Thu Feb 10 14:50:18 2022 us=471081 MANAGEMENT: >STATE:1644519018,AUTH,,,,,,
Thu Feb 10 14:50:18 2022 us=471081 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=568b67ba 95fdfe75
Thu Feb 10 14:50:18 2022 us=517857 Connection reset, restarting [0]
Thu Feb 10 14:50:18 2022 us=517857 TCP/UDP: Closing socket
Thu Feb 10 14:50:18 2022 us=517857 SIGUSR1[soft,connection-reset] received, process restarting
Thu Feb 10 14:50:18 2022 us=517857 MANAGEMENT: >STATE:1644519018,RECONNECTING,connection-reset,,,,,
Thu Feb 10 14:50:18 2022 us=517857 Restart pause, 5 second(s)
Thu Feb 10 14:50:23 2022 us=567320 Re-using SSL/TLS context
Thu Feb 10 14:50:23 2022 us=567320 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb 10 14:50:23 2022 us=567320 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb 10 14:50:23 2022 us=567320 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Thu Feb 10 14:50:23 2022 us=567320 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Thu Feb 10 14:50:23 2022 us=567320 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:23 2022 us=567320 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 10 14:50:23 2022 us=567320 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Thu Feb 10 14:50:23 2022 us=567320 MANAGEMENT: >STATE:1644519023,TCP_CONNECT,,,,,,
Thu Feb 10 14:50:24 2022 us=582857 TCP connection established with [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:24 2022 us=582857 TCP_CLIENT link local: (not bound)
Thu Feb 10 14:50:24 2022 us=582857 TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:24 2022 us=582857 MANAGEMENT: >STATE:1644519024,WAIT,,,,,,
Thu Feb 10 14:50:24 2022 us=582857 MANAGEMENT: >STATE:1644519024,AUTH,,,,,,
Thu Feb 10 14:50:24 2022 us=582857 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=43b7cb4e 20ddd687
Thu Feb 10 14:50:24 2022 us=614033 Connection reset, restarting [0]
Thu Feb 10 14:50:24 2022 us=614033 TCP/UDP: Closing socket
Thu Feb 10 14:50:24 2022 us=614033 SIGUSR1[soft,connection-reset] received, process restarting
Thu Feb 10 14:50:24 2022 us=614033 MANAGEMENT: >STATE:1644519024,RECONNECTING,connection-reset,,,,,
Thu Feb 10 14:50:24 2022 us=614033 Restart pause, 5 second(s)
Thu Feb 10 14:50:29 2022 us=666486 Re-using SSL/TLS context
Thu Feb 10 14:50:29 2022 us=666486 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb 10 14:50:29 2022 us=666486 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb 10 14:50:29 2022 us=666486 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Thu Feb 10 14:50:29 2022 us=666486 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Thu Feb 10 14:50:29 2022 us=666486 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:29 2022 us=666486 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 10 14:50:29 2022 us=666486 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Thu Feb 10 14:50:29 2022 us=666486 MANAGEMENT: >STATE:1644519029,TCP_CONNECT,,,,,,
Thu Feb 10 14:50:30 2022 us=682024 TCP connection established with [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:30 2022 us=682024 TCP_CLIENT link local: (not bound)
Thu Feb 10 14:50:30 2022 us=682024 TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:30 2022 us=682024 MANAGEMENT: >STATE:1644519030,WAIT,,,,,,
Thu Feb 10 14:50:30 2022 us=682024 MANAGEMENT: >STATE:1644519030,AUTH,,,,,,
Thu Feb 10 14:50:30 2022 us=682024 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=24c99382 0d0c758a
Thu Feb 10 14:50:30 2022 us=728830 Connection reset, restarting [0]
Thu Feb 10 14:50:30 2022 us=728830 TCP/UDP: Closing socket
Thu Feb 10 14:50:30 2022 us=728830 SIGUSR1[soft,connection-reset] received, process restarting
Thu Feb 10 14:50:30 2022 us=728830 MANAGEMENT: >STATE:1644519030,RECONNECTING,connection-reset,,,,,
Thu Feb 10 14:50:30 2022 us=728830 Restart pause, 5 second(s)
Thu Feb 10 14:50:35 2022 us=779509 Re-using SSL/TLS context
Thu Feb 10 14:50:35 2022 us=779509 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb 10 14:50:35 2022 us=779509 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb 10 14:50:35 2022 us=779509 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Thu Feb 10 14:50:35 2022 us=779509 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Thu Feb 10 14:50:35 2022 us=779509 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:35 2022 us=779509 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 10 14:50:35 2022 us=779509 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Thu Feb 10 14:50:35 2022 us=779509 MANAGEMENT: >STATE:1644519035,TCP_CONNECT,,,,,,
Thu Feb 10 14:50:36 2022 us=787690 TCP connection established with [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:36 2022 us=787690 TCP_CLIENT link local: (not bound)
Thu Feb 10 14:50:36 2022 us=787690 TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:36 2022 us=787690 MANAGEMENT: >STATE:1644519036,WAIT,,,,,,
Thu Feb 10 14:50:36 2022 us=787690 MANAGEMENT: >STATE:1644519036,AUTH,,,,,,
Thu Feb 10 14:50:36 2022 us=787690 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=891eab41 1f9dd975
Thu Feb 10 14:50:36 2022 us=803231 Connection reset, restarting [0]
Thu Feb 10 14:50:36 2022 us=803231 TCP/UDP: Closing socket
Thu Feb 10 14:50:36 2022 us=803231 SIGUSR1[soft,connection-reset] received, process restarting
Thu Feb 10 14:50:36 2022 us=803231 MANAGEMENT: >STATE:1644519036,RECONNECTING,connection-reset,,,,,
Thu Feb 10 14:50:36 2022 us=803231 Restart pause, 5 second(s)
Thu Feb 10 14:50:41 2022 us=866253 Re-using SSL/TLS context
Thu Feb 10 14:50:41 2022 us=866253 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Thu Feb 10 14:50:41 2022 us=866253 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Feb 10 14:50:41 2022 us=866253 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Thu Feb 10 14:50:41 2022 us=866253 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Thu Feb 10 14:50:41 2022 us=866253 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:41 2022 us=866253 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 10 14:50:41 2022 us=866253 Attempting to establish TCP connection with [AF_INET]x.x.x.x:1194 [nonblock]
Thu Feb 10 14:50:41 2022 us=866253 MANAGEMENT: >STATE:1644519041,TCP_CONNECT,,,,,,
Thu Feb 10 14:50:42 2022 us=868381 TCP connection established with [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:42 2022 us=868381 TCP_CLIENT link local: (not bound)
Thu Feb 10 14:50:42 2022 us=868381 TCP_CLIENT link remote: [AF_INET]x.x.x.x:1194
Thu Feb 10 14:50:42 2022 us=868381 MANAGEMENT: >STATE:1644519042,WAIT,,,,,,
Thu Feb 10 14:50:42 2022 us=868381 MANAGEMENT: >STATE:1644519042,AUTH,,,,,,
Thu Feb 10 14:50:42 2022 us=868381 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=284030be 3d2e3381
Thu Feb 10 14:50:42 2022 us=915192 Connection reset, restarting [0]
Thu Feb 10 14:50:42 2022 us=915192 TCP/UDP: Closing socket
Thu Feb 10 14:50:42 2022 us=915192 SIGUSR1[soft,connection-reset] received, process restarting
Thu Feb 10 14:50:42 2022 us=915192 MANAGEMENT: >STATE:1644519042,RECONNECTING,connection-reset,,,,,
Thu Feb 10 14:50:42 2022 us=915192 Restart pause, 10 second(s)
Thu Feb 10 14:50:46 2022 us=957220 SIGTERM[hard,init_instance] received, process exiting
Thu Feb 10 14:50:46 2022 us=957220 MANAGEMENT: >STATE:1644519046,EXITING,init_instance,,,,,

TinCanTech

You need the Openvpn Server log.

The log you posted looks like syslog.

WattsToo

Sorry, turns out Mikrotik routers require OVPN specific logging to be enabled manually. I have edited the previous post with the updated log lines.

TinCanTech

Unfortunately, your log is now too verbose for you to find the right information, even if that was the right log.

Look up --log and --verb in the manual and see if your strange device can handle something simple,
like an openvpn server log.