muelli 2 Posted ... HiI have a problem with the Czech server.Since a few weeks the server seems to stall now an then (every few minutes).No data is coming through. Then openvpn reconnects and it works again till the next stop. I switched to other servers because of this, but basically i like the czech server. Is there a problem with this server that will be fixed? thanks! Quote Share this post Link to post
LZ1 672 Posted ... Hello! If you want help then you'll have to show us how these disconnects look like, in the logs:) Sent to you from me with datalove Quote Hide LZ1's signature Hide all signatures Hi there, are you new to AirVPN? Many of your questions are already answered in this guide. You may also read the Eddie Android FAQ. Moderators do not speak on behalf of AirVPN. Only the Official Staff account does. Please also do not run Tor Exit Servers behind AirVPN, thank you. Did you make a guide or how-to for something? Then contact me to get it listed in my new user guide's Guides Section, so that the community can find it more easily. Share this post Link to post
muelli 2 Posted ... there is not much to see, when traffic stops, it stops.I discovered, that it is just some sites that seem to stop working. for example this forum/airvpn works, but google.com wont open.very weird.just in case, the logs from the connect (when traffic stops to certain sites, openvpn does not automatically reconnect, I do that manually): Oct 28 09:00:10 server ovpn-airvpn[28530]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec 1 2014Oct 28 09:00:10 server ovpn-airvpn[28530]: Control Channel Authentication: tls-auth using INLINE static key fileOct 28 09:00:10 server ovpn-airvpn[28530]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authenticationOct 28 09:00:10 server ovpn-airvpn[28530]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authenticationOct 28 09:00:10 server ovpn-airvpn[28530]: Socket Buffers: R=[212992->131072] S=[212992->131072]Oct 28 09:00:10 server ovpn-airvpn[28531]: UDPv4 link local: [undef]Oct 28 09:00:10 server ovpn-airvpn[28531]: UDPv4 link remote: [AF_INET]89.238.166.234:443Oct 28 09:00:10 server ovpn-airvpn[28531]: TLS: Initial packet from [AF_INET]89.238.166.234:443, sid=4edede61 2aec2df5Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.orgOct 28 09:00:10 server ovpn-airvpn[28531]: Validating certificate key usageOct 28 09:00:10 server ovpn-airvpn[28531]: ++ Certificate has key usage 00a0, expects 00a0Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY KU OKOct 28 09:00:10 server ovpn-airvpn[28531]: Validating certificate extended key usageOct 28 09:00:10 server ovpn-airvpn[28531]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server AuthenticationOct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY EKU OKOct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.orgOct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit keyOct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authenticationOct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit keyOct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authenticationOct 28 09:00:15 server ovpn-airvpn[28531]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSAOct 28 09:00:15 server ovpn-airvpn[28531]: [server] Peer Connection Initiated with [AF_INET]89.238.166.234:443Oct 28 09:00:17 server ovpn-airvpn[28531]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)Oct 28 09:00:17 server ovpn-airvpn[28531]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.5.95 255.255.0.0'Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: timers and/or timeouts modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: LZO parms modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: --ifconfig/up options modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: route options modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: route-related options modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modifiedOct 28 09:00:17 server ovpn-airvpn[28531]: ROUTE_GATEWAY x.x.x.x/255.255.255.0 IFACE=p3p1 HWADDR=xx:xx:xx:xx:xx:xxOct 28 09:00:17 server ovpn-airvpn[28531]: TUN/TAP device tun0 openedOct 28 09:00:17 server ovpn-airvpn[28531]: TUN/TAP TX queue length set to 100Oct 28 09:00:17 server ovpn-airvpn[28531]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0Oct 28 09:00:17 server ovpn-airvpn[28531]: /sbin/ip link set dev tun0 up mtu 1500Oct 28 09:00:17 server ovpn-airvpn[28531]: /sbin/ip addr add dev tun0 10.4.5.95/16 broadcast 10.4.255.255Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add x.x.x.x/32 via x.x.x.xOct 28 09:00:22 server ovpn-airvpn[28531]: ERROR: Linux route add command failed: external program exited with error status: 2Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add 0.0.0.0/1 via 10.4.0.1Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add 128.0.0.0/1 via 10.4.0.1Oct 28 09:00:22 server ovpn-airvpn[28531]: Initialization Sequence Completed Quote Share this post Link to post
Staff 9973 Posted ... Hello, have you seen this?Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add x.x.x.x/32 via x.x.x.xOct 28 09:00:22 server ovpn-airvpn[28531]: ERROR: Linux route add command failed: external program exited with error status: 2 You must have noticed because you edited it. Kind regards Quote Share this post Link to post
muelli 2 Posted ... Yes I have. But nevertheless, the route gets set correctly. Today I saw this error by openvpn and then it does a hard restart:event_wait : Interrupted system call (code=4) it is quite confusing... Quote Share this post Link to post
muelli 2 Posted ... The hanging connections seem to get worse, I have this now with other servers to (spain, etc). For testing purposes I switched to NordVPN. More or less to my amazement, the problem stopped. So it seems either you have rolled out some changes in the last weeks that impact me now, or there is another problem...What could I provide you with, to further analyze the problem? Quote Share this post Link to post
zhang888 1066 Posted ... Post your logs when the issue occurs, not just at the first connection.Currently the Czech server is at 477Mbit usage, so you might want to test others as well. Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post
muelli 2 Posted ... If you speak of the devil... it just happened again. Just before, I set openvpn to be a bit more verbose. Here the tunnel just stopped working: Nov 14 13:08:33 server ovpn-airvpn[20341]: [server] Inactivity timeout (--ping-restart), restartingNov 14 13:08:33 server ovpn-airvpn[20341]: TCP/UDP: Closing socketNov 14 13:08:33 server ovpn-airvpn[20341]: SIGUSR1[soft,ping-restart] received, process restartingNov 14 13:08:33 server ovpn-airvpn[20341]: Restart pause, 2 second(s) It tried to reconnect, but because of the stall and the soft ping-restart, the routes where still set, so it could not resolv, etc.Nov 14 13:08:35 server ovpn-airvpn[20341]: Re-using SSL/TLS contextNov 14 13:08:35 server ovpn-airvpn[20341]: LZO compression initializedNov 14 13:08:35 server ovpn-airvpn[20341]: Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]Nov 14 13:08:35 server ovpn-airvpn[20341]: Socket Buffers: R=[212992->425984] S=[212992->425984]Nov 14 13:08:55 server ovpn-airvpn[20341]: RESOLVE: Cannot resolve host address: cz.vpn.airdns.org: Temporary failure in name resolutionNov 14 13:08:55 server ovpn-airvpn[20341]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]Nov 14 13:08:55 server ovpn-airvpn[20341]: Local Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'Nov 14 13:08:55 server ovpn-airvpn[20341]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'Nov 14 13:08:55 server ovpn-airvpn[20341]: Local Options hash (VER=V4): '5aa199aa'Nov 14 13:08:55 server ovpn-airvpn[20341]: Expected Remote Options hash (VER=V4): 'c61d845c'Nov 14 13:09:15 server ovpn-airvpn[20341]: RESOLVE: Cannot resolve host address: cz.vpn.airdns.org: Temporary failure in name resolution Then I restart manually:Nov 14 13:09:26 server ovpn-airvpn[20571]: Current Parameter Settings:Nov 14 13:09:26 server ovpn-airvpn[20571]: config = '/etc/openvpn/airvpn.conf'Nov 14 13:09:26 server ovpn-airvpn[20571]: mode = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: persist_config = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: persist_mode = 1Nov 14 13:09:26 server ovpn-airvpn[20571]: show_ciphers = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: show_digests = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: show_engines = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: genkey = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: key_pass_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: show_tls_ciphers = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: Connection profiles [default]:Nov 14 13:09:26 server ovpn-airvpn[20571]: proto = udpNov 14 13:09:26 server ovpn-airvpn[20571]: local = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: local_port = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: remote = 'cz.vpn.airdns.org'Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_port = 443Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_float = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: bind_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: bind_local = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: connect_retry_seconds = 5Nov 14 13:09:26 server ovpn-airvpn[20571]: connect_timeout = 10Nov 14 13:09:26 server ovpn-airvpn[20571]: connect_retry_max = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: socks_proxy_server = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: socks_proxy_port = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: socks_proxy_retry = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tun_mtu = 1500Nov 14 13:09:26 server ovpn-airvpn[20571]: tun_mtu_defined = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: link_mtu = 1500Nov 14 13:09:26 server ovpn-airvpn[20571]: link_mtu_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tun_mtu_extra = 32Nov 14 13:09:26 server ovpn-airvpn[20571]: tun_mtu_extra_defined = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: mtu_discover_type = -1Nov 14 13:09:26 server ovpn-airvpn[20571]: fragment = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: mssfix = 1450Nov 14 13:09:26 server ovpn-airvpn[20571]: explicit_exit_notification = 5Nov 14 13:09:26 server ovpn-airvpn[20571]: Connection profiles ENDNov 14 13:09:26 server ovpn-airvpn[20571]: remote_random = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ipchange = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: dev = 'tun'Nov 14 13:09:26 server ovpn-airvpn[20571]: dev_type = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: dev_node = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: lladdr = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: topology = 1Nov 14 13:09:26 server ovpn-airvpn[20571]: tun_ipv6 = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_local = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_remote_netmask = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_noexec = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_nowarn = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_local = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_netbits = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_remote = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: shaper = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: mtu_test = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: mlock = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: keepalive_ping = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: keepalive_timeout = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: inactivity_timeout = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: ping_send_timeout = 15Nov 14 13:09:26 server ovpn-airvpn[20571]: ping_rec_timeout = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: ping_rec_timeout_action = 2Nov 14 13:09:26 server ovpn-airvpn[20571]: ping_timer_remote = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: remap_sigusr1 = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: persist_tun = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: persist_local_ip = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: persist_remote_ip = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: persist_key = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: passtos = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: resolve_retry_seconds = 1000000000Nov 14 13:09:26 server ovpn-airvpn[20571]: username = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: groupname = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: chroot_dir = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: cd_dir = '/etc/openvpn'Nov 14 13:09:26 server ovpn-airvpn[20571]: writepid = '/run/openvpn/airvpn.pid'Nov 14 13:09:26 server ovpn-airvpn[20571]: up_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: down_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: down_pre = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: up_restart = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: up_delay = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: daemon = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: inetd = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: log = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: suppress_timestamps = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: nice = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: verbosity = 4Nov 14 13:09:26 server ovpn-airvpn[20571]: mute = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: gremlin = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: status_file = '/run/openvpn/airvpn.status'Nov 14 13:09:26 server ovpn-airvpn[20571]: status_file_version = 1Nov 14 13:09:26 server ovpn-airvpn[20571]: status_file_update_freq = 10Nov 14 13:09:26 server ovpn-airvpn[20571]: occ = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: rcvbuf = 524288Nov 14 13:09:26 server ovpn-airvpn[20571]: sndbuf = 524288Nov 14 13:09:26 server ovpn-airvpn[20571]: mark = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: sockflags = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: fast_io = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: lzo = 7Nov 14 13:09:26 server ovpn-airvpn[20571]: route_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: route_default_gateway = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: route_default_metric = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: route_noexec = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: route_delay = 5Nov 14 13:09:26 server ovpn-airvpn[20571]: route_delay_window = 30Nov 14 13:09:26 server ovpn-airvpn[20571]: route_delay_defined = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: route_nopull = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: route_gateway_via_dhcp = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: max_routes = 100Nov 14 13:09:26 server ovpn-airvpn[20571]: allow_pull_fqdn = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: management_addr = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: management_port = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: management_user_pass = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: management_log_history_cache = 250Nov 14 13:09:26 server ovpn-airvpn[20571]: management_echo_buffer_size = 100Nov 14 13:09:26 server ovpn-airvpn[20571]: management_write_peer_info_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: management_client_user = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: management_client_group = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: management_flags = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: shared_secret_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: key_direction = 2Nov 14 13:09:26 server ovpn-airvpn[20571]: ciphername_defined = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ciphername = 'AES-256-CBC'Nov 14 13:09:26 server ovpn-airvpn[20571]: authname_defined = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: authname = 'SHA1'Nov 14 13:09:26 server ovpn-airvpn[20571]: prng_hash = 'SHA1'Nov 14 13:09:26 server ovpn-airvpn[20571]: prng_nonce_secret_len = 16Nov 14 13:09:26 server ovpn-airvpn[20571]: keysize = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: engine = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: replay = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: mute_replay_warnings = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: replay_window = 64Nov 14 13:09:26 server ovpn-airvpn[20571]: replay_time = 15Nov 14 13:09:26 server ovpn-airvpn[20571]: packet_id_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: use_iv = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: test_crypto = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tls_server = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tls_client = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: key_method = 2Nov 14 13:09:26 server ovpn-airvpn[20571]: ca_file = '[[iNLINE]]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ca_path = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: dh_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: cert_file = '[[iNLINE]]'Nov 14 13:09:26 server ovpn-airvpn[20571]: priv_key_file = '[[iNLINE]]'Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs12_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: cipher_list = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: tls_verify = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: tls_export_cert = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: verify_x509_type = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: verify_x509_name = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: crl_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ns_cert_type = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_cert_ku = 160Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_cert_ku = 136Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_cert_ku = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 13 times: [ remote_cert_ku = 0]Nov 14 13:09:26 server ovpn-airvpn[20571]: remote_cert_eku = 'TLS Web Server Authentication'Nov 14 13:09:26 server ovpn-airvpn[20571]: ssl_flags = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: tls_timeout = 2Nov 14 13:09:26 server ovpn-airvpn[20571]: renegotiate_bytes = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: renegotiate_packets = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: renegotiate_seconds = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: handshake_window = 60Nov 14 13:09:26 server ovpn-airvpn[20571]: transition_window = 3600Nov 14 13:09:26 server ovpn-airvpn[20571]: single_session = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: push_peer_info = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tls_exit = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tls_auth_file = '[[iNLINE]]'Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_protected_authentication = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [ pkcs11_protected_authentication = DISABLED]Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_private_mode = 00000000Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [ pkcs11_private_mode = 00000000]Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_cert_private = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [ pkcs11_cert_private = DISABLED]Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_pin_cache_period = -1Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_id = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: pkcs11_id_management = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: server_network = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_netmask = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_network_ipv6 = ::Nov 14 13:09:26 server ovpn-airvpn[20571]: server_netbits_ipv6 = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_bridge_ip = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_bridge_netmask = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_bridge_pool_start = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: server_bridge_pool_end = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_start = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_end = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_netmask = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_persist_filename = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_pool_persist_refresh_freq = 600Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_pool_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_pool_base = ::Nov 14 13:09:26 server ovpn-airvpn[20571]: ifconfig_ipv6_pool_netbits = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: n_bcast_buf = 256Nov 14 13:09:26 server ovpn-airvpn[20571]: tcp_queue_limit = 64Nov 14 13:09:26 server ovpn-airvpn[20571]: real_hash_size = 256Nov 14 13:09:26 server ovpn-airvpn[20571]: virtual_hash_size = 256Nov 14 13:09:26 server ovpn-airvpn[20571]: client_connect_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: learn_address_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: client_disconnect_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: client_config_dir = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: ccd_exclusive = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: tmp_dir = '/tmp'Nov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_local = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_remote_netmask = 0.0.0.0Nov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_ipv6_defined = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_ipv6_local = ::/0Nov 14 13:09:26 server ovpn-airvpn[20571]: push_ifconfig_ipv6_remote = ::Nov 14 13:09:26 server ovpn-airvpn[20571]: enable_c2c = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: duplicate_cn = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: cf_max = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: cf_per = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: max_clients = 1024Nov 14 13:09:26 server ovpn-airvpn[20571]: max_routes_per_client = 256Nov 14 13:09:26 server ovpn-airvpn[20571]: auth_user_pass_verify_script = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: auth_user_pass_verify_script_via_file = DISABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: port_share_host = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: port_share_port = 0Nov 14 13:09:26 server ovpn-airvpn[20571]: client = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: pull = ENABLEDNov 14 13:09:26 server ovpn-airvpn[20571]: auth_user_pass_file = '[uNDEF]'Nov 14 13:09:26 server ovpn-airvpn[20571]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec 1 2014Nov 14 13:09:26 server ovpn-airvpn[20571]: WARNING: --ping should normally be used with --ping-restart or --ping-exitNov 14 13:09:26 server ovpn-airvpn[20571]: Control Channel Authentication: tls-auth using INLINE static key fileNov 14 13:09:26 server ovpn-airvpn[20571]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authenticationNov 14 13:09:26 server ovpn-airvpn[20571]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authenticationNov 14 13:09:26 server ovpn-airvpn[20571]: LZO compression initializedNov 14 13:09:26 server ovpn-airvpn[20571]: Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]Nov 14 13:09:26 server ovpn-airvpn[20571]: Socket Buffers: R=[212992->425984] S=[212992->425984]Nov 14 13:09:26 server ovpn-airvpn[20571]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]Nov 14 13:09:26 server ovpn-airvpn[20571]: Local Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'Nov 14 13:09:26 server ovpn-airvpn[20571]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'Nov 14 13:09:26 server ovpn-airvpn[20571]: Local Options hash (VER=V4): '5aa199aa'Nov 14 13:09:26 server ovpn-airvpn[20571]: Expected Remote Options hash (VER=V4): 'c61d845c'Nov 14 13:09:26 server ovpn-airvpn[20572]: UDPv4 link local: [undef]Nov 14 13:09:26 server ovpn-airvpn[20572]: UDPv4 link remote: [AF_INET]89.238.166.234:443Nov 14 13:09:27 server ovpn-airvpn[20572]: TLS: Initial packet from [AF_INET]89.238.166.234:443, sid=04efc86b 529d0252Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.orgNov 14 13:09:27 server ovpn-airvpn[20572]: Validating certificate key usageNov 14 13:09:27 server ovpn-airvpn[20572]: ++ Certificate has key usage 00a0, expects 00a0Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY KU OKNov 14 13:09:27 server ovpn-airvpn[20572]: Validating certificate extended key usageNov 14 13:09:27 server ovpn-airvpn[20572]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server AuthenticationNov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY EKU OKNov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.orgNov 14 13:09:30 server ovpn-airvpn[20572]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1590', remote='link-mtu 1558'Nov 14 13:09:30 server ovpn-airvpn[20572]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'Nov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit keyNov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authenticationNov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit keyNov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authenticationNov 14 13:09:30 server ovpn-airvpn[20572]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSANov 14 13:09:30 server ovpn-airvpn[20572]: [server] Peer Connection Initiated with [AF_INET]89.238.166.234:443Nov 14 13:09:32 server ovpn-airvpn[20572]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)Nov 14 13:09:32 server ovpn-airvpn[20572]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.5.95 255.255.0.0'Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: timers and/or timeouts modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: LZO parms modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: --ifconfig/up options modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: route options modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: route-related options modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modifiedNov 14 13:09:32 server ovpn-airvpn[20572]: ROUTE_GATEWAY X.X.X.X/255.255.255.0 IFACE=p3p1 HWADDR=00:X:X:X:X:XNov 14 13:09:32 server ovpn-airvpn[20572]: TUN/TAP device tun0 openedNov 14 13:09:32 server ovpn-airvpn[20572]: TUN/TAP TX queue length set to 1000Nov 14 13:09:32 server ovpn-airvpn[20572]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0Nov 14 13:09:32 server ovpn-airvpn[20572]: /sbin/ip link set dev tun0 up mtu 1500Nov 14 13:09:32 server ovpn-airvpn[20572]: /sbin/ip addr add dev tun0 10.4.5.95/16 broadcast 10.4.255.255Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 89.238.166.234/32 via X:X:X:X Interestingly, the route ERROR still appears with airVPN, it did not with nordVPN....However the route is being set correctly. Nov 14 13:09:37 server ovpn-airvpn[20572]: ERROR: Linux route add command failed: external program exited with error status: 2Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 0.0.0.0/1 via 10.4.0.1Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 128.0.0.0/1 via 10.4.0.1Nov 14 13:09:37 server ovpn-airvpn[20572]: Initialization Sequence Completed As everything was working very nicely with nordVPN, i copied some of their settings to the airVPN config:remote-randompersist-tuntun-mtu 1500tun-mtu-extra 32mssfix 1450ping 15ping-restart 0ping-timer-remreneg-sec 0comp-lzopullfast-io But the behaviour did not change. Quote Share this post Link to post
zhang888 1066 Posted ... This error:Nov 14 13:09:37 server ovpn-airvpn[20572]: ERROR: Linux route add command failed: external program exited with error status: 2 has nothing to do with the server.When the disconnection is forced by the server, OpenVPN client will restart without status 2. Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post
muelli 2 Posted ... This error does not appear every time. Just did a manual restart and it did not show up.$?=2 just means the kernel rejected the route to be set because it may already exist etc. I think _this_ error is safe to ignore, if the routes are correct afterwards. I removed the nordVPN options and hope I can post more info if the problem occurs again. however I doubt it, as there is just not much to see in the logs...any advice on how to forece more info is welcome. Quote Share this post Link to post
zhang888 1066 Posted ... I meant that you have something causing route conflict from your side.For example, when 2 OpenVPN clients connect to the same server simultaneously. If you use both the Network Manager and OpenVPN in cli mode that can cause the problem.You should make sure that you run OpenVPN client only once. Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post
muelli 2 Posted ... Switched to spain server this morning, so far no problems. Quote Share this post Link to post