haugene / docker-transmission-openvpn

Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
GNU General Public License v3.0
4.12k stars 1.21k forks source link

TLS Error - FastestVPN Provider #1850

Closed JohnShortland closed 3 years ago

JohnShortland commented 3 years ago

Before creating this issue I have:

REQUIRED

Container version & last working release

Required, problem occurs in :

```latest and dev``` *If possible, last working version:* `````` ### Describe the problem

REQUIRED

latest:
2021-06-09 00:01:15 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2021-06-09 00:01:15 TLS Error: TLS handshake failed
2021-06-09 00:01:15 SIGUSR1[soft,tls-error] received, process restarting

dev:
Tue Jun  8 23:58:38 2021 [UNDEF] Inactivity timeout (--ping-exit), exiting
Tue Jun  8 23:58:38 2021 SIGTERM[soft,ping-exit] received, process exiting

Describe the steps you have tried to solve the problem

REQUIRED

1) Tested ovpn file from image on desktop - confirmed it works
2) Tried adding DNS using both methods
3) Tried adding as custom
4) Tried changing timezone to match ovpn country

Add your docker run command or docker-compose file or env details

REQUIRED

    transmission:
      image: haugene/transmission-openvpn:latest
      container_name: transmission
      restart: always
      networks:
        - proxy
        - mail
      dns:
        - 213.133.99.99
        - 213.133.98.98
      cap_add:
        - NET_ADMIN
      volumes:
        - /etc/localtime:/etc/localtime:ro
        - transmission_data:/data
        - transmission_config:/config
        - /mnt/data/downloads:/downloads
      environment:
        CREATE_TUN_DEVICE: "true"
        OPENVPN_PROVIDER: FASTESTVPN
        OPENVPN_USERNAME: $FASTEST_USERNAME
        OPENVPN_PASSWORD: $FASTEST_PASSWORD
        OPENVPN_CONFIG: "France-UDP"
        LOCAL_NETWORK: "172.0.0.0/8"
        PUID: $UID
        PGID: $GID
        TZ: $TZ
        UMASK_SET: $UMASK
        TRANSMISSION_RPC_AUTHENTICATION_REQUIRED: "false"
        TRANSMISSION_RPC_HOST_WHITELIST: "127.0.0.1,172.0.0.0/8,178.63.63.219"
        TRANSMISSION_RPC_PASSWORD: ${ROOT_PASSWORD}
        TRANSMISSION_RPC_USERNAME: $ADMIN_EMAIL
        TRANSMISSION_UMASK: 002
        TRANSMISSION_RATIO_LIMIT: 0.01
        TRANSMISSION_RATIO_LIMIT_ENABLED: "true"
        TRANSMISSION_ALT_SPEED_DOWN: 40000
        TRANSMISSION_ALT_SPEED_ENABLED: "false"
        TRANSMISSION_ALT_SPEED_UP: 250
        TRANSMISSION_SPEED_LIMIT_DOWN: 80000
        TRANSMISSION_SPEED_LIMIT_DOWN_ENABLED: "true"
        TRANSMISSION_SPEED_LIMIT_UP: 500
        TRANSMISSION_SPEED_LIMIT_UP_ENABLED: "true"
        TRANSMISSION_INCOMPLETE_DIR: /downloads/torrent/incomming
        TRANSMISSION_INCOMPLETE_DIR_ENABLED: "true"
        TRANSMISSION_WATCH_DIR: /downloads/torrent/watched
        TRANSMISSION_WATCH_DIR_ENABLED: "true"
        TRANSMISSION_DOWNLOAD_DIR: /downloads/torrent/complete
        LOG_TO_STDOUT: "true"
      labels:
        - "com.centurylinklabs.watchtower.enable=true"
        - "traefik.enable=true"
        ## HTTP Routers
        - "traefik.http.routers.transmission-rtr.entrypoints=https"
        - "traefik.http.routers.transmission-rtr.tls=true"
        - "traefik.http.routers.transmission-rtr.rule=Host(`transmission.$DOMAINNAME`)"
        - "traefik.http.routers.transmission-rtr.priority=99"
        ## Middlewares
        - "traefik.http.routers.transmission-rtr.middlewares=chain-oauth@file"
        ## HTTP Services
        - "traefik.http.routers.transmission-rtr.service=transmission-svc"
        - "traefik.http.services.transmission-svc.loadbalancer.server.port=9091"

Logs

REQUIRED

Starting container with revision: 9fae5acbd73f8c8f51fdaef4921447f03b324913
Creating TUN device /dev/net/tun
Using OpenVPN provider: FASTESTVPN
Starting OpenVPN using config France-UDP.ovpn
Setting OpenVPN credentials...
adding route to local network 172.0.0.0/8 via 172.25.0.1 dev eth0
2021-06-09 00:04:09 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2021-06-09 00:04:09 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-06-09 00:04:09 OpenVPN 2.5.2 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May  4 2021
2021-06-09 00:04:09 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
2021-06-09 00:04:09 WARNING: --ping should normally be used with --ping-restart or --ping-exit
2021-06-09 00:04:09 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2021-06-09 00:04:09 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2021-06-09 00:04:09 TCP/UDP: Preserving recently used remote address: [AF_INET]37.59.172.213:4443
2021-06-09 00:04:09 UDP link local: (not bound)
2021-06-09 00:04:09 UDP link remote: [AF_INET]37.59.172.213:4443
2021-06-09 00:05:09 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2021-06-09 00:05:09 TLS Error: TLS handshake failed
2021-06-09 00:05:09 SIGUSR1[soft,tls-error] received, process restarting

Host system

REQUIRED

Ubuntu 20.04
Hetzner dedicated server (Ryzen 3700x)
Docker version 20.10.7, build f0df350 
github-actions[bot] commented 3 years ago

Potential duplicates:

github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

github-actions[bot] commented 3 years ago

Potential duplicates:

github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

pkishino commented 3 years ago

Please stop creating duplicates and properly edit the first issue..someone already posted your mistake..