Bug #8652
closedOpenVPN crash client with "Remote network" option
0%
Description
site-to-site.
if set in openvpn client option "remote network" for example "192.168.18.0/24" -- openvpn client is crashed with parsing error.
For remobe this error need only(!) reboot server.
If need site-to-site routing - add command "route 192.168.18.0 255.255.255.0 192.168.220.9" (220.9 - is gateway ip in tunnel)
in log:
Jul 16 15:24:40 openvpn 36285 OpenVPN 2.4.4 amd64-portbld-freebsd11.1 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Mar 16 2018
Jul 16 15:24:40 openvpn 36285 library versions: OpenSSL 1.0.2m-freebsd 2 Nov 2017, LZO 2.10
Jul 16 15:24:40 openvpn 36354 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jul 16 15:24:40 openvpn 36354 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Jul 16 15:24:40 openvpn 36354 OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.18.0
Jul 16 15:24:40 openvpn 36354 TUN/TAP device ovpnc3 exists previously, keep at program end
Jul 16 15:24:40 openvpn 36354 TUN/TAP device /dev/tap3 opened
Jul 16 15:24:40 openvpn 36354 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Jul 16 15:24:40 openvpn 36354 /sbin/ifconfig ovpnc3 192.168.220.10 netmask 255.255.255.252 mtu 1500 up
Jul 16 15:24:40 openvpn 36354 /usr/local/sbin/ovpn-linkup ovpnc3 1500 1592 192.168.220.10 255.255.255.252 init
Jul 16 15:24:40 openvpn 36354 TCP/UDP: Preserving recently used remote address: [AF_INET]66.166.98.26:1196
Files
Updated by Konstantin Ab over 6 years ago
general log:
Jul 16 15:50:25 php-fpm 316 OpenVPN terminate old pid: 75376
Jul 16 15:50:25 kernel ovpnc3: link state changed to UP
Jul 16 15:50:25 php-fpm 316 OpenVPN PID written: 84552
Jul 16 15:50:25 check_reload_status Linkup starting ovpnc3
Jul 16 15:50:25 check_reload_status Reloading filter
Jul 16 15:50:25 kernel ifa_maintain_loopback_route: insertion failed for interface ovpnc3: 17
Jul 16 15:50:25 kernel ovpnc3: link state changed to DOWN
Jul 16 15:50:25 check_reload_status Linkup starting ovpnc3
Jul 16 15:50:26 php-fpm 317 /rc.linkup: Ignoring link event for ovpn interface
Jul 16 15:50:26 php-fpm 317 /rc.linkup: Ignoring link event for ovpn interface
Updated by Jim Pingle over 6 years ago
- Category set to OpenVPN
- Status changed from New to Not a Bug
- Assignee set to Konstantin Ab
I cannot reproduce this. I tried a static key client and SSL/TLS client and everything worked as expected. The remote network was accepted, OpenVPN was running, route was in the table.
If you can narrow the symptoms down to a specific combination of options that may help, but as stated there isn't a bug I can identify.
Updated by Konstantin Ab over 6 years ago
crash does not always happen, in my network only 2 from 21 routers has this problem. PSK scheme.
BUT! problem with routes from "remote network" (in log: OpenVPN ROUTE: failed to parse/resolve route for host/network: 192.168.18.0) -- there is always 100%. Try it.