Project

General

Profile

Actions

Regression #13603

closed

OpenVPN with DCO crashes due to userspace code being ahead of kernel

Added by Marcos M over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Release Notes:
Force Exclusion
Affected Plus Version:
Affected Architecture:

Description

Tested on pfSense-23.01.a.20221026.0600.

Client/Server crashes with DCO enabled:

dco_set_ifmode: failed to set ifmode=00008002: Operation not supported (errno=45)

See attached logs.


Files

ovpn_client.log (61.2 KB) ovpn_client.log Marcos M, 10/27/2022 06:23 PM
ovpn_server.log (17.6 KB) ovpn_server.log Marcos M, 10/27/2022 06:23 PM
Actions #1

Updated by Marcos M over 1 year ago

  • Description updated (diff)
Actions #2

Updated by Marcos M over 1 year ago

  • File ovpn.log added
  • Subject changed from OpenVPN with DCO crashes when using Intel RDRAND engine for Hardware Crypto. to OpenVPN with DCO crash
  • Description updated (diff)
  • Priority changed from High to Normal
Actions #3

Updated by Marcos M over 1 year ago

Actions #4

Updated by Marcos M over 1 year ago

  • File deleted (ovpn.log)
Actions #5

Updated by Kristof Provost over 1 year ago

  • Status changed from New to Ready To Test

`dco_set_ifmode: failed to set ifmode=00008002: Operation not supported (errno=45)` happened because the openvpn userspace code was ahead of the kernel. There's a new ioctl() to improve subnet config support, and it looks like you landed on a snapshot that had the userspace changes but not the kernel changes.

The kernel changes have now landed (with Glan's recent merge) and I'd expect this problem to be fixed with that.

Actions #6

Updated by Marcos M over 1 year ago

  • Description updated (diff)
Actions #7

Updated by Marcos M over 1 year ago

  • Description updated (diff)
Actions #8

Updated by Marcos M over 1 year ago

  • Subject changed from OpenVPN with DCO crash to OpenVPN with DCO crashes due to userspace code being ahead of kernel
  • Description updated (diff)
  • Status changed from Ready To Test to Resolved
  • Release Notes changed from Default to Force Exclusion

The dco_set_ifmode issue has been resolved after updating to pfSense-23.01.a.20221031.0600.

Actions #9

Updated by Jim Pingle over 1 year ago

  • Project changed from pfSense to pfSense Plus
  • Category changed from OpenVPN to OpenVPN
  • Target version set to 23.01
Actions

Also available in: Atom PDF