Predictable OpenVpn Connect Dropouts and Disconnections

[Ciscogeek]

Hey everyone,

I've got a curious issue that's got me stumped.

I've got a Galaxy Tab 3 10.1" running Android 4.4.2 with the latest OpenVpn Connect client (1.1.17 b76)

The connection when established will work swimmingly for exactly 2 minutes on the nose. Then, the connection will drop out/stall for another 2 minutes on the nose, proceeded by the tunnel being reestablished.

The log only has the following:

Code: Select all

<connected message>
<2 minutes of usefulness>
UDP send error:send: Invalid argument
EVENT:PAUSE trans=TO_DISCONNECTED

It seems related to viewtopic.php?t=18950 But that thread was left hanging, and since there's no Android 5x for this device, upgrading is not an option. I've also tested this on other Android 4x devices with the exact same result

The OpenVpn server is in known-good working order with normal, active desktop users. It's running on UDP only.

I'd really appreciate some help on getting this resolved, as this really screams bug to me.

Thanks!

Client config:

Code: Select all

client
dev tun
proto udp
remote {SNIPPED FOR PRIVACY}
lport 0
sndbuf 393216
rcvbuf 393216
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
remote-cert-tls server
cipher BF-CBC        # Blowfish (default)
key-direction 1
verb 3

{CERTS SNIPPED FOR PRIVACY}

[TinCanTech]

It seems related to viewtopic.php?t=18950 But that thread was left hanging

Hanging ?

Well, I went ahead and upgrade by LG G3 to Android version 5.0.1 and that seems to have resolved my issues with this problem. Previously, I was on Android Version 4.4.4 and when I was on Sprint's 4GLTE, I was always get disconnects and my connection would reset completely. Now since the upgrade, OpenVPN has been solid.

Fixed ..

I've got a Galaxy Tab 3 10.1" running Android 4.4.2 with the latest OpenVpn Connect client (1.1.17 b76)

Upgrade ?

Also, please see:
HOWTO: Request Help !

[Ciscogeek]

Uh... You missed a vital point.

and since there's no Android 5x for this device, upgrading is not an option.

Samsung stopped updates at 4.x for this device.

[TinCanTech]

Uh... You missed a vital point

uh-huh ..

Also, please see:
HOWTO: Request Help !

I have no doubt you are right that the problem is with your client end .. but you never know ?

[Ciscogeek]

As for the other requested details:

Server:
Ubuntu 16.04.1 LTS - 4.4.0-57
OpenVPN 2.3.10

Server config:

Code: Select all

port <port>
proto udp
sndbuf 393216
rcvbuf 393216
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server <IP/Sub>
ifconfig-pool-persist ipp.txt
push "route <IP/Sub>"
push "dhcp-option DNS <IP>"
push "dhcp-option DNS <IP>"
keepalive 10 120
tls-auth ta.key 0
key-direction 0
cipher BF-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4

[Ciscogeek]

I managed to figure out the issue. User had the same cert in use on the tablet and desktop, conflicting. Issued a new one and all is well.

Thanks anyways.