Project

General

Profile

Regression #14833 » 1695949795570-tunnel-fail-after-270-service-restart.txt

Bob Weybrecht, 10/03/2023 04:31 AM

 
1
*****On 2.7.0 OpenVPN service restarted - tunnel fails*****
2

    
3
Sep 28 18:36:36	openvpn	32051	MANAGEMENT: Client connected from /var/etc/openvpn/client1/sock
4
Sep 28 18:36:36	openvpn	32051	MANAGEMENT: CMD 'state 1'
5
Sep 28 18:36:36	openvpn	32051	MANAGEMENT: CMD 'status 2'
6
Sep 28 18:36:36	openvpn	32051	MANAGEMENT: Client disconnected
7
Sep 28 18:36:40	openvpn	32051	event_wait : Interrupted system call (fd=-1,code=4)
8
Sep 28 18:36:40	openvpn	32051	SIGTERM received, sending exit notification to peer
9
Sep 28 18:36:41	openvpn	32051	TCP/UDP: Closing socket
10
Sep 28 18:36:41	openvpn	32051	Closing TUN/TAP interface
11
Sep 28 18:36:41	openvpn	32051	/sbin/ifconfig ovpnc1 172.16.10.2 -alias
12
Sep 28 18:36:41	openvpn	32051	/usr/local/sbin/ovpn-linkdown ovpnc1 1500 0 172.16.10.2 255.255.255.0 init
13
Sep 28 18:36:41	openvpn	48606	Flushing states on OpenVPN interface ovpnc1 (Link Down)
14
Sep 28 18:36:42	openvpn	59771	Note: --data-cipher-fallback with cipher 'AES-256-CBC' disables data channel offload.
15
Sep 28 18:36:42	openvpn	59771	Current Parameter Settings:
16
Sep 28 18:36:42	openvpn	59771	config = '/var/etc/openvpn/client1/config.ovpn'
17
Sep 28 18:36:42	openvpn	59771	mode = 0
18
Sep 28 18:36:42	openvpn	59771	show_ciphers = DISABLED
19
Sep 28 18:36:42	openvpn	59771	show_digests = DISABLED
20
Sep 28 18:36:42	openvpn	59771	show_engines = DISABLED
21
Sep 28 18:36:42	openvpn	59771	genkey = DISABLED
22
Sep 28 18:36:42	openvpn	59771	genkey_filename = '[UNDEF]'
23
Sep 28 18:36:42	openvpn	59771	key_pass_file = '[UNDEF]'
24
Sep 28 18:36:42	openvpn	59771	show_tls_ciphers = DISABLED
25
Sep 28 18:36:42	openvpn	59771	connect_retry_max = 0
26
Sep 28 18:36:42	openvpn	59771	Connection profiles [0]:
27
Sep 28 18:36:42	openvpn	59771	proto = udp4
28
Sep 28 18:36:42	openvpn	59771	local = '10.141.11.200'
29
Sep 28 18:36:42	openvpn	59771	local_port = '0'
30
Sep 28 18:36:42	openvpn	59771	remote = '192.168.129.250'
31
Sep 28 18:36:42	openvpn	59771	remote_port = '1194'
32
Sep 28 18:36:42	openvpn	59771	remote_float = DISABLED
33
Sep 28 18:36:42	openvpn	59771	bind_defined = DISABLED
34
Sep 28 18:36:42	openvpn	59771	bind_local = ENABLED
35
Sep 28 18:36:42	openvpn	59771	bind_ipv6_only = DISABLED
36
Sep 28 18:36:42	openvpn	59771	connect_retry_seconds = 1
37
Sep 28 18:36:42	openvpn	59771	connect_timeout = 120
38
Sep 28 18:36:42	openvpn	59771	socks_proxy_server = '[UNDEF]'
39
Sep 28 18:36:42	openvpn	59771	socks_proxy_port = '[UNDEF]'
40
Sep 28 18:36:42	openvpn	59771	tun_mtu = 1500
41
Sep 28 18:36:42	openvpn	59771	tun_mtu_defined = ENABLED
42
Sep 28 18:36:42	openvpn	59771	link_mtu = 1500
43
Sep 28 18:36:42	openvpn	59771	link_mtu_defined = DISABLED
44
Sep 28 18:36:42	openvpn	59771	tun_mtu_extra = 32
45
Sep 28 18:36:42	openvpn	59771	tun_mtu_extra_defined = ENABLED
46
Sep 28 18:36:42	openvpn	59771	tls_mtu = 1250
47
Sep 28 18:36:42	openvpn	59771	mtu_discover_type = -1
48
Sep 28 18:36:42	openvpn	59771	fragment = 0
49
Sep 28 18:36:42	openvpn	59771	mssfix = 1492
50
Sep 28 18:36:42	openvpn	59771	mssfix_encap = ENABLED
51
Sep 28 18:36:42	openvpn	59771	mssfix_fixed = DISABLED
52
Sep 28 18:36:42	openvpn	59771	explicit_exit_notification = 1
53
Sep 28 18:36:42	openvpn	59771	tls_auth_file = '[UNDEF]'
54
Sep 28 18:36:42	openvpn	59771	key_direction = not set
55
Sep 28 18:36:42	openvpn	59771	tls_crypt_file = '[UNDEF]'
56
Sep 28 18:36:42	openvpn	59771	tls_crypt_v2_file = '[UNDEF]'
57
Sep 28 18:36:42	openvpn	59771	Connection profiles END
58
Sep 28 18:36:42	openvpn	59771	remote_random = DISABLED
59
Sep 28 18:36:42	openvpn	59771	ipchange = '[UNDEF]'
60
Sep 28 18:36:42	openvpn	59771	dev = 'ovpnc1'
61
Sep 28 18:36:42	openvpn	59771	dev_type = 'tap'
62
Sep 28 18:36:42	openvpn	59771	dev_node = '/dev/tap1'
63
Sep 28 18:36:42	openvpn	59771	tuntap_options.disable_dco = ENABLED
64
Sep 28 18:36:42	openvpn	59771	lladdr = '[UNDEF]'
65
Sep 28 18:36:42	openvpn	59771	topology = 1
66
Sep 28 18:36:42	openvpn	59771	ifconfig_local = '[UNDEF]'
67
Sep 28 18:36:42	openvpn	59771	ifconfig_remote_netmask = '[UNDEF]'
68
Sep 28 18:36:42	openvpn	59771	ifconfig_noexec = DISABLED
69
Sep 28 18:36:42	openvpn	59771	ifconfig_nowarn = DISABLED
70
Sep 28 18:36:42	openvpn	59771	ifconfig_ipv6_local = '[UNDEF]'
71
Sep 28 18:36:42	openvpn	59771	ifconfig_ipv6_netbits = 0
72
Sep 28 18:36:42	openvpn	59771	ifconfig_ipv6_remote = '[UNDEF]'
73
Sep 28 18:36:42	openvpn	59771	shaper = 0
74
Sep 28 18:36:42	openvpn	59771	mtu_test = 0
75
Sep 28 18:36:42	openvpn	59771	mlock = DISABLED
76
Sep 28 18:36:42	openvpn	59771	keepalive_ping = 10
77
Sep 28 18:36:42	openvpn	59771	keepalive_timeout = 60
78
Sep 28 18:36:42	openvpn	59771	inactivity_timeout = 0
79
Sep 28 18:36:42	openvpn	59771	session_timeout = 0
80
Sep 28 18:36:42	openvpn	59771	inactivity_minimum_bytes = 0
81
Sep 28 18:36:42	openvpn	59771	ping_send_timeout = 10
82
Sep 28 18:36:42	openvpn	59771	ping_rec_timeout = 60
83
Sep 28 18:36:42	openvpn	59771	ping_rec_timeout_action = 2
84
Sep 28 18:36:42	openvpn	59771	ping_timer_remote = ENABLED
85
Sep 28 18:36:42	openvpn	59771	remap_sigusr1 = 0
86
Sep 28 18:36:42	openvpn	59771	persist_tun = ENABLED
87
Sep 28 18:36:42	openvpn	59771	persist_local_ip = DISABLED
88
Sep 28 18:36:42	openvpn	59771	persist_remote_ip = DISABLED
89
Sep 28 18:36:42	openvpn	59771	persist_key = ENABLED
90
Sep 28 18:36:42	openvpn	59771	passtos = DISABLED
91
Sep 28 18:36:42	openvpn	59771	resolve_retry_seconds = 1000000000
92
Sep 28 18:36:42	openvpn	59771	resolve_in_advance = DISABLED
93
Sep 28 18:36:42	openvpn	59771	username = '[UNDEF]'
94
Sep 28 18:36:42	openvpn	59771	groupname = '[UNDEF]'
95
Sep 28 18:36:42	openvpn	59771	chroot_dir = '[UNDEF]'
96
Sep 28 18:36:42	openvpn	59771	cd_dir = '[UNDEF]'
97
Sep 28 18:36:42	openvpn	59771	writepid = '/var/run/openvpn_client1.pid'
98
Sep 28 18:36:42	openvpn	59771	up_script = '/usr/local/sbin/ovpn-linkup'
99
Sep 28 18:36:42	openvpn	59771	down_script = '/usr/local/sbin/ovpn-linkdown'
100
Sep 28 18:36:42	openvpn	59771	down_pre = DISABLED
101
Sep 28 18:36:42	openvpn	59771	up_restart = DISABLED
102
Sep 28 18:36:42	openvpn	59771	up_delay = DISABLED
103
Sep 28 18:36:42	openvpn	59771	daemon = ENABLED
104
Sep 28 18:36:42	openvpn	59771	log = DISABLED
105
Sep 28 18:36:42	openvpn	59771	suppress_timestamps = DISABLED
106
Sep 28 18:36:42	openvpn	59771	machine_readable_output = DISABLED
107
Sep 28 18:36:42	openvpn	59771	nice = 0
108
Sep 28 18:36:42	openvpn	59771	verbosity = 5
109
Sep 28 18:36:42	openvpn	59771	mute = 0
110
Sep 28 18:36:42	openvpn	59771	gremlin = 0
111
Sep 28 18:36:42	openvpn	59771	status_file = '[UNDEF]'
112
Sep 28 18:36:42	openvpn	59771	status_file_update_freq = 60
113
Sep 28 18:36:42	openvpn	59771	occ = ENABLED
114
Sep 28 18:36:42	openvpn	59771	sndbuf = 0
115
Sep 28 18:36:42	openvpn	59771	fast_io = DISABLED
116
Sep 28 18:36:42	openvpn	59771	comp.flags = 24
117
Sep 28 18:36:42	openvpn	59771	route_default_gateway = '[UNDEF]'
118
Sep 28 18:36:42	openvpn	59771	route_noexec = DISABLED
119
Sep 28 18:36:42	openvpn	59771	route_delay_window = 30
120
Sep 28 18:36:42	openvpn	59771	route_nopull = DISABLED
121
Sep 28 18:36:42	openvpn	59771	allow_pull_fqdn = DISABLED
122
Sep 28 18:36:42	openvpn	59771	management_port = 'unix'
123
Sep 28 18:36:42	openvpn	59771	management_log_history_cache = 250
124
Sep 28 18:36:42	openvpn	59771	management_client_user = '[UNDEF]'
125
Sep 28 18:36:42	openvpn	59771	management_flags = 256
126
Sep 28 18:36:42	openvpn	59771	key_direction = not set
127
Sep 28 18:36:42	openvpn	59771	ncp_ciphers = 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC'
128
Sep 28 18:36:42	openvpn	59771	authname = 'SHA256'
129
Sep 28 18:36:42	openvpn	59771	replay = ENABLED
130
Sep 28 18:36:42	openvpn	59771	replay_window = 64
131
Sep 28 18:36:42	openvpn	59771	packet_id_file = '[UNDEF]'
132
Sep 28 18:36:42	openvpn	59771	tls_server = DISABLED
133
Sep 28 18:36:42	openvpn	59771	ca_file = '[UNDEF]'
134
Sep 28 18:36:42	openvpn	59771	dh_file = '[UNDEF]'
135
Sep 28 18:36:42	openvpn	59771	extra_certs_file = '[UNDEF]'
136
Sep 28 18:36:42	openvpn	59771	pkcs12_file = '[UNDEF]'
137
Sep 28 18:36:42	openvpn	59771	cipher_list_tls13 = '[UNDEF]'
138
Sep 28 18:36:42	openvpn	59771	tls_verify = '[UNDEF]'
139
Sep 28 18:36:42	openvpn	59771	verify_x509_type = 0
140
Sep 28 18:36:42	openvpn	59771	crl_file = '[UNDEF]'
141
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 65535
142
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
143
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
144
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
145
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
146
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
147
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
148
Sep 28 18:36:42	openvpn	59771	remote_cert_ku[i] = 0
149
Sep 28 18:36:42	openvpn	59771	remote_cert_eku = 'TLS Web Server Authentication'
150
Sep 28 18:36:42	openvpn	59771	tls_timeout = 2
151
Sep 28 18:36:42	openvpn	59771	renegotiate_packets = 0
152
Sep 28 18:36:42	openvpn	59771	handshake_window = 60
153
Sep 28 18:36:42	openvpn	59771	single_session = DISABLED
154
Sep 28 18:36:42	openvpn	59771	tls_exit = DISABLED
155
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
156
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
157
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
158
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
159
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
160
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
161
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
162
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
163
Sep 28 18:36:42	openvpn	59771	pkcs11_protected_authentication = DISABLED
164
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
165
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
166
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
167
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
168
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
169
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
170
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
171
Sep 28 18:36:42	openvpn	59771	pkcs11_private_mode = 00000000
172
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
173
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
174
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
175
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
176
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
177
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
178
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
179
Sep 28 18:36:42	openvpn	59771	pkcs11_cert_private = DISABLED
180
Sep 28 18:36:42	openvpn	59771	pkcs11_id = '[UNDEF]'
181
Sep 28 18:36:42	openvpn	59771	server_network = 0.0.0.0
182
Sep 28 18:36:42	openvpn	59771	server_netmask = 0.0.0.0
183
Sep 28 18:36:42	openvpn	59771	server_network_ipv6 = ::
184
Sep 28 18:36:42	openvpn	59771	server_bridge_ip = 0.0.0.0
185
Sep 28 18:36:42	openvpn	59771	server_bridge_pool_start = 0.0.0.0
186
Sep 28 18:36:42	openvpn	59771	server_bridge_pool_end = 0.0.0.0
187
Sep 28 18:36:42	openvpn	59771	ifconfig_pool_start = 0.0.0.0
188
Sep 28 18:36:42	openvpn	59771	ifconfig_pool_netmask = 0.0.0.0
189
Sep 28 18:36:42	openvpn	59771	ifconfig_pool_persist_refresh_freq = 600
190
Sep 28 18:36:42	openvpn	59771	ifconfig_ipv6_pool_base = ::
191
Sep 28 18:36:42	openvpn	59771	n_bcast_buf = 256
192
Sep 28 18:36:42	openvpn	59771	real_hash_size = 256
193
Sep 28 18:36:42	openvpn	59771	client_connect_script = '[UNDEF]'
194
Sep 28 18:36:42	openvpn	59771	learn_address_script = '[UNDEF]'
195
Sep 28 18:36:42	openvpn	59771	client_crresponse_script = '[UNDEF]'
196
Sep 28 18:36:42	openvpn	59771	ccd_exclusive = DISABLED
197
Sep 28 18:36:42	openvpn	59771	tmp_dir = '/tmp'
198
Sep 28 18:36:42	openvpn	59771	push_ifconfig_defined = DISABLED
199
Sep 28 18:36:42	openvpn	59771	push_ifconfig_local = 0.0.0.0
200
Sep 28 18:36:42	openvpn	59771	push_ifconfig_remote_netmask = 0.0.0.0
201
Sep 28 18:36:42	openvpn	59771	push_ifconfig_ipv6_defined = DISABLED
202
Sep 28 18:36:42	openvpn	59771	push_ifconfig_ipv6_local = ::/0
203
Sep 28 18:36:42	openvpn	59771	push_ifconfig_ipv6_remote = ::
204
Sep 28 18:36:42	openvpn	59771	enable_c2c = DISABLED
205
Sep 28 18:36:42	openvpn	59771	duplicate_cn = DISABLED
206
Sep 28 18:36:42	openvpn	59771	cf_max = 0
207
Sep 28 18:36:42	openvpn	59771	cf_per = 0
208
Sep 28 18:36:42	openvpn	59771	cf_initial_max = 100
209
Sep 28 18:36:42	openvpn	59771	cf_initial_per = 10
210
Sep 28 18:36:42	openvpn	59771	max_clients = 1024
211
Sep 28 18:36:42	openvpn	59771	auth_user_pass_verify_script = '[UNDEF]'
212
Sep 28 18:36:42	openvpn	59771	auth_token_generate = DISABLED
213
Sep 28 18:36:42	openvpn	59771	auth_token_secret_file = '[UNDEF]'
214
Sep 28 18:36:42	openvpn	59771	port_share_port = '[UNDEF]'
215
Sep 28 18:36:42	openvpn	59771	vlan_accept = all
216
Sep 28 18:36:42	openvpn	59771	client = DISABLED
217
Sep 28 18:36:42	openvpn	59771	auth_user_pass_file = '[UNDEF]'
218
Sep 28 18:36:42	openvpn	59771	OpenVPN 2.6.4 amd64-portbld-freebsd14.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO]
219
Sep 28 18:36:42	openvpn	59771	DCO version: FreeBSD 14.0-CURRENT #1 RELENG_2_7_0-n255866-686c8d3c1f0: Wed Jun 28 04:21:19 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/obj/amd64/LwYAddCr/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/sources/FreeBSD-src-REL
220
Sep 28 18:36:42	openvpn	60082	MANAGEMENT: unix domain socket listening on /var/etc/openvpn/client1/sock
221
Sep 28 18:36:42	openvpn	60082	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
222
Sep 28 18:36:42	openvpn	60082	WARNING: experimental option --capath /var/etc/openvpn/client1/ca
223
Sep 28 18:36:42	openvpn	60082	Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
224
Sep 28 18:36:42	openvpn	60082	Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
225
Sep 28 18:36:42	openvpn	60082	TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.129.250:1194
226
Sep 28 18:36:42	openvpn	60082	Socket Buffers: R=[42080->42080] S=[57344->57344]
227
Sep 28 18:36:42	openvpn	60082	UDPv4 link local (bound): [AF_INET]10.141.11.200:0
228
Sep 28 18:36:42	openvpn	60082	UDPv4 link remote: [AF_INET]192.168.129.250:1194
229
Sep 28 18:36:42	openvpn	60082	TLS: Initial packet from [AF_INET]192.168.129.250:1194, sid=1cc4d1fd f7d3c06b
230
Sep 28 18:36:42	openvpn	60082	VERIFY WARNING: depth=0, unable to get certificate CRL: CN=ExampleServer
231
Sep 28 18:36:42	openvpn	60082	VERIFY WARNING: depth=1, unable to get certificate CRL: CN=Example-CA
232
Sep 28 18:36:42	openvpn	60082	VERIFY OK: depth=1, CN=Example-CA
233
Sep 28 18:36:42	openvpn	60082	VERIFY KU OK
234
Sep 28 18:36:42	openvpn	60082	Validating certificate extended key usage
235
Sep 28 18:36:42	openvpn	60082	++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
236
Sep 28 18:36:42	openvpn	60082	VERIFY EKU OK
237
Sep 28 18:36:42	openvpn	60082	VERIFY OK: depth=0, CN=ExampleServer
238
Sep 28 18:36:42	openvpn	60082	Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
239
Sep 28 18:36:42	openvpn	60082	[ExampleServer] Peer Connection Initiated with [AF_INET]192.168.129.250:1194
240
Sep 28 18:36:42	openvpn	60082	TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
241
Sep 28 18:36:42	openvpn	60082	TLS: tls_multi_process: initial untrusted session promoted to trusted
242
Sep 28 18:36:42	openvpn	60082	PUSH: Received control message: 'PUSH_REPLY,route-gateway 172.16.10.1,ping 10,ping-restart 60,ifconfig 172.16.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
243
Sep 28 18:36:42	openvpn	60082	OPTIONS IMPORT: --ifconfig/up options modified
244
Sep 28 18:36:42	openvpn	60082	OPTIONS IMPORT: route-related options modified
245
Sep 28 18:36:42	openvpn	60082	TUN/TAP device ovpnc1 exists previously, keep at program end
246
Sep 28 18:36:42	openvpn	60082	TUN/TAP device /dev/tap1 opened
247
Sep 28 18:36:42	openvpn	60082	do_ifconfig, ipv4=1, ipv6=0
248
Sep 28 18:36:42	openvpn	60082	/sbin/ifconfig ovpnc1 172.16.10.2/24 mtu 1500 up
249
Sep 28 18:36:42	openvpn	60082	FreeBSD ifconfig failed: external program exited with error status: 1
250
Sep 28 18:36:42	openvpn	60082	Exiting due to fatal error
(2-2/5)