Project

General

Profile

Actions
Copy link

Regression #13963

closed

OpenVPN and GIF interface create/destroy operations fail due to outdated ``linker.hints``

Added by Steve Wheeler about 1 year ago. Updated 10 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
Operating System
Target version:
2.7.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.05
Release Notes:
Default
Affected Version:
2.7.0
Affected Architecture:
SG-3100

Description

Tunnels can fail to start like:

Feb 16 13:32:46     openvpn     53057     DEPRECATED OPTION: The option --secret is deprecated.
Feb 16 13:32:46     openvpn     53057     DEPRECATION: No tls-client or tls-server option in configuration detected. OpenVPN 2.7 will remove the functionality to run a VPN without TLS. See the examples section in the manual page for examples of a similar quick setup with peer-fingerprint.
Feb 16 13:32:46     openvpn     53057     OpenVPN 2.6_beta1 armv7-portbld-freebsd14.0 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] [DCO]
Feb 16 13:32:46     openvpn     53057     library versions: OpenSSL 1.1.1t-freebsd 7 Feb 2023, LZO 2.10
Feb 16 13:32:46     openvpn     53057     NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 16 13:32:46     openvpn     53057     Cannot open TUN/TAP dev /dev/tun3: No such file or directory (errno=2)
Feb 16 13:32:46     openvpn     53057     Exiting due to fatal error

When that happens the system log shows:

Feb 16 13:32:45     kernel         warning: KLD '/boot/kernel/kernel' is newer than the linker.hints file
Feb 16 13:32:45     kernel         warning: KLD '/boot/kernel/kernel' is newer than the linker.hints file

This does not affect tunnels that have DCO enabled.

Updating that manually allows the tunnels to start:

kldxref /boot/kernel

This only seems to affect 3100s upgraded to 23.01. Clean installs function as expected.

Actions
Copy link

Also available in: Atom PDF