Skip to content

OpenVPN restarting after segfault error #1067

Description

@GubernievS

Describe the bug
OpenVPN restarting after segfault error

To Reproduce
Unknown

Expected behavior
No error

Version information (please complete the following information):

  • OS: Ubuntu 24.04 HWE
  • OpenVPN version: OpenVPN 2.7.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [COMP_STUB] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
    library versions: OpenSSL 3.0.13 30 Jan 2024
    DCO version: 6.17.0-35-generic Add support for Zstandard compression #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 19:30:42 UTC 2

Additional context
journalctl log:
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_VER=3.11.1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_PLAT=ios
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_NCP=2
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_TCPNL=1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_PROTO=8094
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_MTU=1600
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_CIPHERS=AES-128-CBC:AES-192-CBC:AES-256-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_AUTO_SESS=1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_SSO=webauth,crtext
openvpn[607]: udp4:80.253.14.47:1508 [user-123] Peer Connection Initiated with [AF_INET]80.253.14.47:1508
openvpn[607]: ovpn_handle_peer: received data for a non-existing peer 80
kernel: vpn-udp: deleting peer with id 178, reason 2
kernel: vpn-udp: deleting peer with id 80, reason 1
kernel: openvpn[607]: segfault at 55f3744d54b2 ip 000055f61ac8ea7a sp 00007fff1a213010 error 4 in openvpn[46a7a,55f61ac53000+8a000] likely on CPU 0 (core 0, socket 0)
kernel: Code: 7f 18 48 89 c6 48 89 44 24 08 e8 21 b2 fe ff 48 8b 7c 24 08 e8 e7 b2 fe ff 48 85 c0 0f 84 bb 00 00 00 4c 8b 00 4c 39 c3 74 e5 <41> 80 78 50 00 75 de 49 8b b8 58 11 00 00 be 01 00 00 00 4c 89 44

kernel: vpn-udp: deleting peer with id 38, reason 4
kernel: vpn-udp: deleting peer with id 83, reason 4
kernel: vpn-udp: deleting peer with id 86, reason 4
kernel: vpn-udp: deleting peer with id 125, reason 4
kernel: vpn-udp: deleting peer with id 102, reason 4
kernel: vpn-udp: deleting peer with id 4, reason 4
kernel: vpn-udp: deleting peer with id 13, reason 4
kernel: vpn-udp: deleting peer with id 60, reason 4
kernel: vpn-udp: deleting peer with id 43, reason 4
kernel: vpn-udp: deleting peer with id 134, reason 4
kernel: vpn-udp: deleting peer with id 75, reason 4
kernel: vpn-udp: deleting peer with id 137, reason 4
kernel: vpn-udp: deleting peer with id 81, reason 4
kernel: vpn-udp: deleting peer with id 169, reason 4
kernel: vpn-udp: deleting peer with id 62, reason 4
kernel: vpn-udp: deleting peer with id 168, reason 4
kernel: vpn-udp: deleting peer with id 100, reason 4
kernel: vpn-udp: deleting peer with id 87, reason 4
.....
systemd[1]: openvpn-server@vpn-udp.service: Scheduled restart job, restart counter is at 1.
systemd[1]: Starting openvpn-server@vpn-udp.service - OpenVPN service for vpn-udp...
openvpn[1805429]: OpenVPN 2.7.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [COMP_STUB] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
openvpn[1805429]: library versions: OpenSSL 3.0.13 30 Jan 2024
openvpn[1805429]: DCO version: 6.17.0-35-generic #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 19:30:42 UTC 2
systemd[1]: Started openvpn-server@vpn-udp.service - OpenVPN service for vpn-udp.
openvpn[1805429]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
openvpn[1805429]: CRL: loaded 1 CRLs from file keys/crl.pem
openvpn[1805429]: sitnl_send: rtnl: generic error (-17): File exists
openvpn[1805429]: DCO device vpn-udp already exists, won't be destroyed at shutdown
openvpn[1805429]: ovpn-dco device [vpn-udp] opened
openvpn[1805429]: net_iface_mtu_set: mtu 1420 for vpn-udp
openvpn[1805429]: net_iface_up: set vpn-udp up
openvpn[1805429]: net_addr_v4_add: 10.29.0.1/22 dev vpn-udp
openvpn[1805429]: UDPv4 link local (bound): [AF_INET][undef]:50443
openvpn[1805429]: UDPv4 link remote: [AF_UNSPEC]
openvpn[1805429]: UID set to nobody
openvpn[1805429]: Capabilities retained: CAP_NET_ADMIN
openvpn[1805429]: Initialization Sequence Completed

conf:
cd /etc/openvpn/server
mode server
proto udp4
port 50443
dev-type tun
dev vpn-udp
topology subnet
server 10.29.0.0 255.255.252.0
push "dhcp-option DNS 10.29.0.1"
push "block-outside-dns"
cipher AES-128-GCM
keepalive 15 30
persist-tun
float
user nobody
#duplicate-cn
#verb 4
#log logs/vpn-udp.log
status logs/vpn-udp-status.log 30
client-config-dir ccd
ca keys/ca.crt
cert keys/vpn-server.crt
key keys/vpn-server.key
crl-verify keys/crl.pem
dh none
tls-groups "X25519:prime256v1"
reneg-sec 0
inactive 86400
hand-window 10
tun-mtu 1420
mssfix 0
block-ipv6
script-security 2
client-connect scripts/client-connect.sh
client-disconnect scripts/client-disconnect.sh
management /run/openvpn-server/vpn-udp.sock unix
data-ciphers "AES-128-GCM:AES-256-GCM:CHACHA20-POLY1305"

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions