adrienverge / openfortivpn

Client for PPP+TLS VPN tunnel services
GNU General Public License v3.0
2.65k stars 318 forks source link

"Error writing to SSL connection" on FreeBSD #1206

Open lessless opened 5 months ago

lessless commented 5 months ago

Hi,

I'm using openfortivpn 1.21.0 on FreeBSD:14:amd64 and it dies after a couple of minutes with the following error:


DEBUG:  ppp ---> gateway (54 bytes)
ppp:   00 21 45 00 00 34 00 00 40 00 40 06 c2 bd c0 a8 42 cb c3 ce b0 c4 b6 a2 01 bb 39 3f 6b c9 0f 0c ac 9a 80 14 00 00 87 a0 00 00 01 01 08 0a b9 69 a5 8d 16 f5 e8 18

DEBUG:  Error writing to SSL connection (Connection closed).
DEBUG:  Error reading from SSL connection (Operation timed out).
INFO:   Cancelling threads...
INFO:   Cleanup, joining threads...
DEBUG:  Disconnecting
INFO:   Setting tun0 interface down.
INFO:   Restoring routes...
DEBUG:  /sbin/route -n delete -host 195.206.176.196 192.168.66.1
delete host 195.206.176.196: gateway 192.168.66.1 fib 0: not in table
INFO:   Removing VPN nameservers...
DEBUG:  resolvconf_call: /sbin/resolvconf -d "tun0.openfortivpn"
DEBUG:  Waiting for ppp to exit...
DEBUG:  waitpid: ppp exit status code 0
DEBUG:  ppp: Successful exit.
INFO:   Terminated ppp.
INFO:   Closed connection to gateway.
DEBUG:  SO_KEEPALIVE: OFF
DEBUG:  TCP_KEEPIDLE: 7200
DEBUG:  TCP_KEEPINTVL: 75
DEBUG:  TCP_KEEPCNT: 8
DEBUG:  SO_SNDBUF: 32768
DEBUG:  SO_RCVBUF: 65536
DEBUG:  server_addr: 195.206.176.196
DEBUG:  server_port: 443
DEBUG:  gateway_ip: 195.206.176.196
DEBUG:  gateway_port: 443
DEBUG:  Setting cipher list to: HIGH:!aNULL:!kRSA:!PSK:!SRP:!MD5:!RC4
DEBUG:  Setting minimum protocol version to: 0x303.
DEBUG:  Gateway certificate validation failed.
DEBUG:  Gateway certificate digest found in white list.

Full log: https://pastebin.com/xx8My56N

I tried suggested ppp.conf doas openfortivpn -c /usr/local/etc/openfortivpn/flattire --ppp-system flattire-vpn -v -v

flattire-client:
 set dial
 set speed 38400
 set mru 1354
 set login
 set timeout 0
 disable deflate pred1
 deny deflate pred1

but with no luck

VVD commented 1 month ago

Check this: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279988