Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

Connection keeps dropping after 1-2h

Looking for assistance with a cryptostorm connection issue? Post here & we'll help out. Also: if you're not sure where to post, do so here & we'll move things around as needed. Also: for quickest support, email our oddly calm & easygoing support reps at support@cryptostorm.is :)

Topic Author
pedro_cucaracha_3

Connection keeps dropping after 1-2h

Postby pedro_cucaracha_3 » Mon Jul 24, 2017 12:35 am

Hi guys,

I installed openvpn (2.3.4) on my raspberry pi 3 and configured it with the Frankfurt linux conference file. I added the token to a text file and linked it in the config. Connecting via

Code: Select all

service openvpn start


works fine. Nevertheless the connection is dropping every 1-2h and I need to manually reset it. The log looks like this when it happens and it seems that it cannot restore itself:

Code: Select all

Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: Current Parameter Settings:
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]:   config = '/etc/openvpn/client.conf'
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]:   mode = 0
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: NOTE: --mute triggered...
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: 372 variation(s) on previous 3 message(s) suppressed by --mute
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 27 2017
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: WARNING: file '/etc/openvpn/cryptoken.txt' is group or others accessible
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: LZO compression initialized
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: Control Channel MTU parms [ L:1604 D:140 EF:40 EB:0 ET:0 EL:0 ]
Jul 23 12:32:34 my-macbook-pro ovpn-client[6501]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jul 23 12:32:35 my-macbook-pro ovpn-client[6501]: Data Channel MTU parms [ L:1604 D:1450 EF:104 EB:135 ET:0 EL:0 AF:3/1 ]
Jul 23 12:32:35 my-macbook-pro ovpn-client[6501]: Local Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Jul 23 12:32:35 my-macbook-pro ovpn-client[6501]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Jul 23 12:32:35 my-macbook-pro ovpn-client[6501]: Local Options hash (VER=V4): '06d8c75c'
Jul 23 12:32:35 my-macbook-pro ovpn-client[6501]: Expected Remote Options hash (VER=V4): 'b20ffe30'
Jul 23 12:32:35 my-macbook-pro ovpn-client[6507]: Attempting to establish TCP connection with [AF_INET]46.165.240.174:443 [nonblock]
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: TCP connection established with [AF_INET]46.165.240.174:443
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: TCPv4_CLIENT link local: [undef]
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: TCPv4_CLIENT link remote: [AF_INET]46.165.240.174:443
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: TLS: Initial packet from [AF_INET]46.165.240.174:443, sid=32810273 f4a9bc57
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: depth=1, C=CA, ST=QC, L=Montreal, O=Katana Holdings Limite /  cryptostorm_darknet, OU=Tech Ops, CN=cryptostorm_is, emailAddress=certadmin@cryptostorm.is
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: nsCertType=SERVER
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: depth=0, C=CA, ST=QC, L=Montreal, O=Katana Holdings Limite /  cryptostorm_darknet, OU=Tech Ops, CN=server, emailAddress=certadmin@cryptostorm.is
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: NOTE: --mute triggered...
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: 5 variation(s) on previous 3 message(s) suppressed by --mute
Jul 23 12:32:36 my-macbook-pro ovpn-client[6507]: [server] Peer Connection Initiated with [AF_INET]46.165.240.174:443
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: PUSH: Received control message: 'PUSH_REPLY,persist-key,persist-tun,redirect-gateway def1,dhcp-option DNS 46.165.240.171,route-gateway 10.34.0.1,topology subnet,ping 20,ping-restart 60,ifconfig 10.34.78.60 255.255.0.0'
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: OPTIONS IMPORT: timers and/or timeouts modified
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: NOTE: --mute triggered...
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: 5 variation(s) on previous 3 message(s) suppressed by --mute
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=wlan0 HWADDR=b8:27:eb:2a:29:c6
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: TUN/TAP device tun0 opened
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: TUN/TAP TX queue length set to 100
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: /sbin/ip link set dev tun0 up mtu 1500
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: /sbin/ip addr add dev tun0 10.34.78.60/16 broadcast 10.34.255.255
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: /sbin/ip route add 46.165.240.174/32 via 192.168.178.1
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: /sbin/ip route add 0.0.0.0/1 via 10.34.0.1
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: /sbin/ip route add 128.0.0.0/1 via 10.34.0.1
Jul 23 12:32:39 my-macbook-pro ovpn-client[6507]: Initialization Sequence Completed
Jul 23 12:52:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: depth=1, C=CA, ST=QC, L=Montreal, O=Katana Holdings Limite /  cryptostorm_darknet, OU=Tech Ops, CN=cryptostorm_is, emailAddress=certadmin@cryptostorm.is
Jul 23 12:52:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: nsCertType=SERVER
Jul 23 12:52:36 my-macbook-pro ovpn-client[6507]: VERIFY OK: depth=0, C=CA, ST=QC, L=Montreal, O=Katana Holdings Limite /  cryptostorm_darknet, OU=Tech Ops, CN=server, emailAddress=certadmin@cryptostorm.is
Jul 23 12:52:37 my-macbook-pro ovpn-client[6507]: NOTE: --mute triggered...
Jul 23 13:49:26 my-macbook-pro ovpn-client[6507]: 21 variation(s) on previous 3 message(s) suppressed by --mute
Jul 23 13:49:26 my-macbook-pro ovpn-client[6507]: [server] Inactivity timeout (--ping-restart), restarting
Jul 23 13:49:26 my-macbook-pro ovpn-client[6507]: TCP/UDP: Closing socket
Jul 23 13:49:26 my-macbook-pro ovpn-client[6507]: SIGUSR1[soft,ping-restart] received, process restarting
Jul 23 13:49:26 my-macbook-pro ovpn-client[6507]: Restart pause, 5 second(s)
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Re-using SSL/TLS context
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: LZO compression initialized
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Control Channel MTU parms [ L:1604 D:140 EF:40 EB:0 ET:0 EL:0 ]
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Data Channel MTU parms [ L:1604 D:1450 EF:104 EB:135 ET:0 EL:0 AF:3/1 ]
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Local Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Local Options hash (VER=V4): '06d8c75c'
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Expected Remote Options hash (VER=V4): 'b20ffe30'
Jul 23 13:49:31 my-macbook-pro ovpn-client[6507]: Attempting to establish TCP connection with [AF_INET]46.165.222.248:443 [nonblock]
<same output repeating>


The incident happens at Jul 23 13:49:26 in the log. Any ideas? What could be the reason for this:

Code: Select all

... [server] Inactivity timeout (--ping-restart), restarting


I'm running the raspy with the current jessie lite

Thanks,
Stefan

User avatar

parityboy
Site Admin
Posts: 1105
Joined: Wed Feb 05, 2014 3:47 am

Re: Connection keeps dropping after 1-2h

Postby parityboy » Mon Jul 24, 2017 6:25 pm

@OP

Check your token at the token checker in my sig. Does it complain about sessions being exceeded?


Return to “member support & tech assistance”

Who is online

Users browsing this forum: Baidu [Spider] and 23 guests

Login