search

haugene / vpn-configs-contrib

A collection of configs for various VPN providers
GNU General Public License v3.0
188 stars 753 forks source link

TLS Error - FastestVPN #51

Closed JohnShortland closed 3 years ago

JohnShortland commented 3 years ago

Before creating this issue I have:

REQUIRED

Container version & last working release

Required, problem occurs in :

```latest and dev``` *If possible, last working version:* `````` ### Describe the problem

REQUIRED

latest:
2021-06-09 00:01:15 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2021-06-09 00:01:15 TLS Error: TLS handshake failed
2021-06-09 00:01:15 SIGUSR1[soft,tls-error] received, process restarting

dev:
Tue Jun  8 23:58:38 2021 [UNDEF] Inactivity timeout (--ping-exit), exiting
Tue Jun  8 23:58:38 2021 SIGTERM[soft,ping-exit] received, process exiting

Describe the steps you have tried to solve the problem

REQUIRED

1) Tested ovpn file from image on desktop - confirmed it works
2) Tried adding DNS using both methods
3) Tried adding as custom
4) Tried changing timezone to match ovpn country

Add your docker run command or docker-compose file or env details

REQUIRED

    transmission:
      image: haugene/transmission-openvpn:latest
      container_name: transmission
      restart: always
      networks:
        - proxy
        - mail
      dns:
        - 213.133.99.99
        - 213.133.98.98
      cap_add:
        - NET_ADMIN
      volumes:
        - /etc/localtime:/etc/localtime:ro
        - transmission_data:/data
        - transmission_config:/config
        - /mnt/data/downloads:/downloads
      environment:
        CREATE_TUN_DEVICE: "true"
        OPENVPN_PROVIDER: FASTESTVPN
        OPENVPN_USERNAME: $FASTEST_USERNAME
        OPENVPN_PASSWORD: $FASTEST_PASSWORD
        OPENVPN_CONFIG: "France-UDP"
        LOCAL_NETWORK: "172.0.0.0/8"
        PUID: $UID
        PGID: $GID
        TZ: $TZ
        UMASK_SET: $UMASK
        TRANSMISSION_RPC_AUTHENTICATION_REQUIRED: "false"
        TRANSMISSION_RPC_HOST_WHITELIST: "127.0.0.1,172.0.0.0/8,178.63.63.219"
        TRANSMISSION_RPC_PASSWORD: ${ROOT_PASSWORD}
        TRANSMISSION_RPC_USERNAME: $ADMIN_EMAIL
        TRANSMISSION_UMASK: 002
        TRANSMISSION_RATIO_LIMIT: 0.01
        TRANSMISSION_RATIO_LIMIT_ENABLED: "true"
        TRANSMISSION_ALT_SPEED_DOWN: 40000
        TRANSMISSION_ALT_SPEED_ENABLED: "false"
        TRANSMISSION_ALT_SPEED_UP: 250
        TRANSMISSION_SPEED_LIMIT_DOWN: 80000
        TRANSMISSION_SPEED_LIMIT_DOWN_ENABLED: "true"
        TRANSMISSION_SPEED_LIMIT_UP: 500
        TRANSMISSION_SPEED_LIMIT_UP_ENABLED: "true"
        TRANSMISSION_INCOMPLETE_DIR: /downloads/torrent/incomming
        TRANSMISSION_INCOMPLETE_DIR_ENABLED: "true"
        TRANSMISSION_WATCH_DIR: /downloads/torrent/watched
        TRANSMISSION_WATCH_DIR_ENABLED: "true"
        TRANSMISSION_DOWNLOAD_DIR: /downloads/torrent/complete
        LOG_TO_STDOUT: "true"
      labels:
        - "com.centurylinklabs.watchtower.enable=true"
        - "traefik.enable=true"
        ## HTTP Routers
        - "traefik.http.routers.transmission-rtr.entrypoints=https"
        - "traefik.http.routers.transmission-rtr.tls=true"
        - "traefik.http.routers.transmission-rtr.rule=Host(`transmission.$DOMAINNAME`)"
        - "traefik.http.routers.transmission-rtr.priority=99"
        ## Middlewares
        - "traefik.http.routers.transmission-rtr.middlewares=chain-oauth@file"
        ## HTTP Services
        - "traefik.http.routers.transmission-rtr.service=transmission-svc"
        - "traefik.http.services.transmission-svc.loadbalancer.server.port=9091"

Logs

REQUIRED

Starting container with revision: 9fae5acbd73f8c8f51fdaef4921447f03b324913
Creating TUN device /dev/net/tun
Using OpenVPN provider: FASTESTVPN
Starting OpenVPN using config France-UDP.ovpn
Setting OpenVPN credentials...
adding route to local network 172.0.0.0/8 via 172.25.0.1 dev eth0
2021-06-09 00:04:09 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2021-06-09 00:04:09 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-06-09 00:04:09 OpenVPN 2.5.2 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May  4 2021
2021-06-09 00:04:09 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
2021-06-09 00:04:09 WARNING: --ping should normally be used with --ping-restart or --ping-exit
2021-06-09 00:04:09 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2021-06-09 00:04:09 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2021-06-09 00:04:09 TCP/UDP: Preserving recently used remote address: [AF_INET]37.59.172.213:4443
2021-06-09 00:04:09 UDP link local: (not bound)
2021-06-09 00:04:09 UDP link remote: [AF_INET]37.59.172.213:4443
2021-06-09 00:05:09 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2021-06-09 00:05:09 TLS Error: TLS handshake failed
2021-06-09 00:05:09 SIGUSR1[soft,tls-error] received, process restarting

Host system

REQUIRED

Ubuntu 20.04
Hetzner dedicated server (Ryzen 3700x)
Docker version 20.10.7, build f0df350
github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

JohnShortland commented 3 years ago

I followed the template, why was this closed?

github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

ilike2burnthing commented 3 years ago

Remove the space in [x ] and [ x] so it is [x]:

github-actions[bot] commented 3 years ago

Potential duplicates:

github-actions[bot] commented 3 years ago

@JohnShortland: hello! :wave:

This issue is being automatically closed because it does not follow the issue template. If you edit and follow the template properly by filling it in completely the issue will be re-opened

github-actions[bot] commented 3 years ago

Potential duplicates:

pkishino commented 3 years ago

Was this working before? I suspect, apart from vpn provider issue, the local network might clash.. You say you tried the ovpn file outside the container, it worked right? And the same file as custom has result as in logs?

JohnShortland commented 3 years ago

@pkishino Never set this up before.

The docker networks are all 172.x.x.x, there is no other network on the host it is directly connected to the internet. I tried it on my desktop machine and it worked, I also tried setting it as a custom and got the same issue.

pkishino commented 3 years ago

Try a different config please and check if same result..tls is pretty much anyways Provider related.. either config is out of date/wrong or server is not behaving correctly. How did you test on desktop? Via openvpn?

JohnShortland commented 3 years ago

I tried the Austria one and that didnt work so I switched to the France one which is working, I compared the internal docker image .ovpn file to the latest one downloaded directly from the provider. And yes I tested it via OpenVPN on desktop.

stale[bot] commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

danishmehta commented 3 years ago

I am having the same issue. Tried a bunch of different config files. @JohnShortland - Were you able to resolve this issue?

fonz55 commented 3 years ago

Having the same issue here. Can someone please explain to me how to debug/trace this issue in the openvpn execution so I am able to provide more information?

pkishino commented 3 years ago

is this still a problem with 4.0 release ? please retest

fonz55 commented 3 years ago

With release 4.0 it works! At first only some issue with the Switzerland1-UDP connection but the rest seems to work fine. Thanks!