MarkusMcNugen / docker-qBittorrentvpn

Docker container which runs a headless qBittorrent client with WebUI and optional OpenVPN
https://hub.docker.com/r/markusmcnugen/qbittorrentvpn/
GNU General Public License v3.0
171 stars 92 forks source link

nameserver and TLS issues #62

Open caymann12 opened 4 years ago

caymann12 commented 4 years ago

I am using "qbittorent + vpn using docker (marcusmacnugen/qbittorrentvpn)"

I am having issues with this so i thought i seek your help. Please let me know if you see anything...

qb.txt Issue1 > cannot find nameserver 020-06-25 11:59:06.289292 [info] VPN_ENABLED defined as 'yes' 2020-06-25 11:59:06.322819 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/expressvpn_udp.ovpn dos2unix: converting file /config/openvpn/expressvpn_udp.ovpn to Unix format... [info] VPN remote line defined as 'usa-newyork-ca-version-2.expressnetw.com 1195' [info] VPN_REMOTE defined as 'usa-newyork-ca-version-2.expressnetw.com' [info] VPN_PORT defined as '1195' [warn] VPN_PROTOCOL not found in /config/openvpn/expressvpn_udp.ovpn, assuming udp [info] VPN_DEVICE_TYPE defined as 'tun0' [info] LAN_NETWORK defined as '10.66.77.0/24' [warn] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to Google and FreeDNS name servers [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS) [info] Adding 8.8.8.8 to resolv.conf [info] Adding 37.235.1.174 to resolv.conf [info] Adding 8.8.4.4 to resolv.conf [info] Adding 37.235.1.177 to resolv.conf [info] Starting OpenVPN... Thu Jun 25 11:59:06 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 Thu Jun 25 11:59:06 2020 WARNING: file 'credentials.conf' is group or others accessible Thu Jun 25 11:59:06 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019 Thu Jun 25 11:59:06 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08 Thu Jun 25 11:59:06 2020 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Thu Jun 25 11:59:06 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Thu Jun 25 11:59:06 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Thu Jun 25 11:59:34 2020 RESOLVE: Cannot resolve host address: usa-newyork-ca-version-2.expressnetw.com:1195 (Temporary failure in name resolution) Thu Jun 25 12:00:02 2020 RESOLVE: Cannot resolve host address: usa-newyork-ca-version-2.expressnetw.com:1195 (Temporary failure in name resolution) Thu Jun 25 12:00:02 2020 Could not determine IPv4/IPv6 protocol Thu Jun 25 12:00:02 2020 SIGUSR1[soft,init_instance] received, process restarting Thu Jun 25 12:00:02 2020 Restart pause, 5 second(s)

Issue2> If i use the actual IP address of the expressvpnserver, then i make some progress, but get a TLS error 2020-06-25 12:07:13.583851 [info] VPN_ENABLED defined as 'yes' 2020-06-25 12:07:13.612736 [info] OpenVPN config file (ovpn extension) is located at /config/openvpn/expressvpn_udp.ovpn dos2unix: converting file /config/openvpn/expressvpn_udp.ovpn to Unix format... [info] VPN remote line defined as '104.37.31.182 1195' [info] VPN_REMOTE defined as '104.37.31.182' [info] VPN_PORT defined as '1195' [warn] VPN_PROTOCOL not found in /config/openvpn/expressvpn_udp.ovpn, assuming udp [info] VPN_DEVICE_TYPE defined as 'tun0' [info] LAN_NETWORK defined as '10.66.77.0/24' [warn] NAME_SERVERS not defined (via -e NAME_SERVERS), defaulting to Google and FreeDNS name servers [info] VPN_OPTIONS not defined (via -e VPN_OPTIONS) [info] Adding 8.8.8.8 to resolv.conf [info] Adding 37.235.1.174 to resolv.conf [info] Adding 8.8.4.4 to resolv.conf [info] Adding 37.235.1.177 to resolv.conf [info] Starting OpenVPN... Thu Jun 25 12:07:13 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6 Thu Jun 25 12:07:13 2020 WARNING: file 'credentials.conf' is group or others accessible Thu Jun 25 12:07:13 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2019 Thu Jun 25 12:07:13 2020 library versions: OpenSSL 1.1.1 11 Sep 2018, LZO 2.08 Thu Jun 25 12:07:13 2020 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Thu Jun 25 12:07:13 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Thu Jun 25 12:07:13 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication Thu Jun 25 12:07:13 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]104.37.31.182:1195 Thu Jun 25 12:07:13 2020 Socket Buffers: R=[212992->425984] S=[212992->425984] Thu Jun 25 12:07:13 2020 UDP link local: (not bound) Thu Jun 25 12:07:13 2020 UDP link remote: [AF_INET]104.37.31.182:1195 Thu Jun 25 12:08:13 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Thu Jun 25 12:08:13 2020 TLS Error: TLS handshake failed Thu Jun 25 12:08:13 2020 SIGUSR1[soft,tls-error] received, process restarting Thu Jun 25 12:08:13 2020 Restart pause, 5 second(s)

Here is the docker> docker run -d \ --name qbittorrentvpn_8080 \ --restart=unless-stopped \ --net=bridge -p 8080:8080 -p 8999:8999 -p 8999:8999/udp \ --cap-add=NET_ADMIN \ --dns="1.1.1.1" \ --device=/dev/net/tun \ -e VPN_ENABLED=yes \ -e VPN_USERNAME=abcdefghijklmnopqrstuvwx \ -e VPN_PASSWORD=xwvutsrqponmlkjihgfedcba \ -e LAN_NETWORK=10.66.77.0/24 \ -e PUID=1000 \ -e PGID=100 \ -e TZ=America/New_york \ -e UMASK=002 \ -e WEBUI_PORT_ENV=8080 \ -e INCOMING_PORT_ENV=8999 \ -v /etc/localtime:/etc/localtime:ro \ -v /sharedfolders/config/qBittorrentvpn/expressvpn.ovpn:/etc/openvpn/default.ovpn:rw \ -v /sharedfolders/config/qBittorrentvpn:/config:rw \ -v /sharedfolders/downloads/completed:/downloads:rw \ markusmcnugen/qbittorrentvpn

pedromartinez11 commented 4 years ago

I'm running into this too. I'm using PIA with docker compose on open media vault 5 (OMV5)