search

kinu-garage / hut_10sqft

Computer setup tools for my own environment, and public discussion place holder.
2 stars 1 forks source link

OpenVPN fails with "Server poll timeout, restarting" #574

Closed 130s closed 3 years ago

130s commented 3 years ago

Issue

On 2021/08/30 I'm unable to connect to work's VPN.

Full log on bash terminal ``` $ sudo openvpn --config ~/ooo/client.ovpn --auth-user-pass --auth-retry interact Mon Aug 30 14:31:30 2021 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021 Mon Aug 30 14:31:30 2021 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10 Enter Auth Username: uuuussserrrrrrrrr Enter Auth Password: ********* Mon Aug 30 14:31:36 2021 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Mon Aug 30 14:31:36 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xxx.xxx:1194 Mon Aug 30 14:31:36 2021 Socket Buffers: R=[212992->212992] S=[212992->212992] Mon Aug 30 14:31:36 2021 UDP link local: (not bound) Mon Aug 30 14:31:36 2021 UDP link remote: [AF_INET]xx.xxx.xxx.xxx:1194 Mon Aug 30 14:31:40 2021 Server poll timeout, restarting Mon Aug 30 14:31:40 2021 SIGUSR1[soft,server_poll] received, process restarting Mon Aug 30 14:31:40 2021 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Mon Aug 30 14:31:40 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xxx.xxx:1194 Mon Aug 30 14:31:40 2021 Socket Buffers: R=[212992->212992] S=[212992->212992] Mon Aug 30 14:31:40 2021 UDP link local: (not bound) Mon Aug 30 14:31:40 2021 UDP link remote: [AF_INET]xx.xxx.xxx.xxx:1194 Mon Aug 30 14:31:44 2021 Server poll timeout, restarting Mon Aug 30 14:31:44 2021 SIGUSR1[soft,server_poll] received, process restarting Mon Aug 30 14:31:44 2021 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Mon Aug 30 14:31:44 2021 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xxx.xxx:443 Mon Aug 30 14:31:44 2021 Socket Buffers: R=[131072->131072] S=[16384->16384] Mon Aug 30 14:31:44 2021 Attempting to establish TCP connection with [AF_INET]xx.xxx.xxx.xxx:443 [nonblock] : (repeats) ```

Looks like OpenVpn hasn't even reached the point where it asks 2-MFA code.

FYI last week Friday I was able to connect.

Environment

I saw this issue on my Ubuntu 20.04.

$ apt-cache policy openvpn
openvpn:
  Installed: 2.4.7-1ubuntu2.20.04.3
  Candidate: 2.4.7-1ubuntu2.20.04.3
  Version table:
 *** 2.4.7-1ubuntu2.20.04.3 500
        500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     2.4.7-1ubuntu2.20.04.2 500
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
     2.4.7-1ubuntu2 500
        500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages

Workaround attempted

130s commented 3 years ago

In syslog, only this gets printed despite openvpn keeping to attempt reconnecting.

Aug 31 05:37:34 nooooodle-p50 polkitd[1149]: started daemon version 0.105 using authority implementation `local' version `0.105'
Aug 31 05:37:34 nooooodle-p50 dbus-daemon[1126]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.12' (uid=0 pid=1128 comm="/usr/sbin/NetworkManager --no-daemon " label="unconfined")
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Starting Network Time Service...
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Starting OpenVPN service...
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Condition check resulted in fast remote file copy program daemon being skipped.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Service for snap application chuck-norris-webserver.node-service.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Service for snap application face-detection-demo.service.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Service for snap application multipass.multipassd.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Service for snap application shout.server.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Service for snap application webhook.webhook.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Starting OpenBSD Secure Shell server...
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Starting Permit User Sessions...
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Starting xrdp session manager...
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started Dispatcher daemon for systemd-networkd.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Started LSB: This services starts and stops the USB Arbitrator..
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Finished OpenVPN service.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Finished Permit User Sessions.
Aug 31 05:37:34 nooooodle-p50 systemd[1]: Finished Save/Restore Sound Card State.
130s commented 3 years ago

ping xx.xxx.xxx.xxx goes through though.

130s commented 3 years ago

Work switched away from OpenVPN. Won't fix.