OEPNVPN stops after the updates

Jamerson · Aug 2, 2016, 5:13 PM

Hi Guys,
today i have updated one of our Hardware boxes to the
2.3.2-RELEASE (amd64)
built on Tue Jul 19 12:44:43 CDT 2016
FreeBSD 10.3-RELEASE-p5

however after the the openvpn stops working.

Tue Aug 02 18:56:00 2016 TLS Error: TLS handshake failed
Tue Aug 02 18:56:00 2016 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 02 18:56:02 2016 UDPv4 link local (bound): [undef]
Tue Aug 02 18:56:02 2016 UDPv4 link remote: [AF_INET]62.335.21.6:1194
Tue Aug 02 18:57:02 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity

the firewall rule is applied on the WAN side and everything seems fine.
from the line side i can connect using openvpn ,
any suggestions why ?

johnpoz · Aug 2, 2016, 5:34 PM

So do you on purpose stay a revision behind, 2.3.3 came out few days ago.

"Tue Aug 02 18:57:02 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity"

This is what you should check.. Where are you trying to connect from? Does pfsense even show a connection attempt? What does the server log show? That is from your client is it not.

Jamerson · Aug 2, 2016, 6:54 PM

@johnpoz:

So do you on purpose stay a revision behind, 2.3.3 came out few days ago.

"Tue Aug 02 18:57:02 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity"

This is what you should check.. Where are you trying to connect from? Does pfsense even show a connection attempt? What does the server log show? That is from your client is it not.

thank you for your answer,
i am trying to connect from home to the office , i am connected to the internet and everything seems fine.
on the firewall log i see the ip coming coming the firewall log.
on the openvpn it does shows :

Aug 2 20:51:17 openvpn[23697]: MANAGEMENT: Client disconnected
Aug 2 20:51:17 openvpn[23697]: MANAGEMENT: CMD 'quit'
Aug 2 20:51:17 openvpn[23697]: MANAGEMENT: CMD 'status 2'
Aug 2 20:51:17 openvpn[23697]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Aug 2 20:50:15 openvpn[23697]: MANAGEMENT: Client disconnected
Aug 2 20:50:15 openvpn[23697]: MANAGEMENT: CMD 'quit'
Aug 2 20:50:15 openvpn[23697]: MANAGEMENT: CMD 'status 2'
Aug 2 20:50:15 openvpn[23697]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Aug 2 20:49:14 openvpn[23697]: MANAGEMENT: Client disconnected

Jamerson · Aug 3, 2016, 8:54 AM

the Pfsense have two WAN, somehow the routing of the openvpn is not on going to the right interface.