OpenVPN on 2.7.1 crashes on some circumstances

ogghi

@Volui-0
I think it will work.
It hasn't crashed here anymore!

I am wondering if there is any official statement from Netgate or so?

Volui

@ogghi
Yes, I also updated the OpenVPN package via pkg upgrade and now all that remains is to monitor the stability of the server. You are right, it looks like netgate has updated the openvpn package in its repository since the release of 2.7.1, but has not said anything about it anywhere. In any case, pkg upgrade is the only thing we can do about this problem for now.

ogghi

It seems stable here in regards to disconnects, but people using remote desktop sometimes get some timeouts as it seems. Keeping an eye on logs today.

Happy Monday ppl!

jimp

OpenVPN released OpenVPN 2.6.8 which addresses a segfault that some users see with 2.6.7:

https://github.com/OpenVPN/openvpn/issues/449

https://openvpn.net/community-downloads/

We're still discussing what the best course of action is to address it since it doesn't seem to be widespread.

slu

@jimp
we are also affected by random openvpn crashes, this setup running before over 8 years without any issue.

There are many different openvpn clients and version on this server, maybe this combination trigger the issue more...

jimp

We'll be bringing in OpenVPN 2.6.8 to the next patch release (Plus 23.09.1, CE 2.7.2) which should be out here in the next week or so if all goes according to plan.

https://redmine.pfsense.org/issues/15049

michmoor

@jimp
Hey Jim. Any release notes on 23.09.1 ?

jimp

@michmoor said in OpenVPN on 2.7.1 crashes on some circumstances:

@jimp
Hey Jim. Any release notes on 23.09.1 ?

Nothing public yet, but it's primarily security/stability things. The ZFS corruption bug, OpenVPN needed a version bump, so did strongSwan, various fixes in PHP code. Not a long list, but significant enough to warrant a patch release.

michmoor

@jimp
sounds good to me. thanks!

jimp

FYI- If you are on Plus 23.09 or CE 2.7.1 we picked back the update to the current repositories so you can also get OpenVPN 2.6.8_1 right now from the console or SSH shell prompt:

# pkg update
# pkg upgrade -y openvpn

And then either restart each instance manually or reboot.

tedquade

@jimp Done.

Thanks
Ted

OhYeah 0

@jimp said in OpenVPN on 2.7.1 crashes on some circumstances:

FYI- If you are on Plus 23.09 or CE 2.7.1 we picked back the update to the current repositories so you can also get OpenVPN 2.6.8_1 right now from the console or SSH shell prompt:
# pkg update
# pkg upgrade -y openvpn
And then either restart each instance manually or reboot.

We had one virtual instance of pfsense that had the OpenVPN remote access server crash every 2-3 days. After pkg update the server has been running without problems for 5+ days.

slu

We can confirm this, no issue since 2.6.8_1, thank you @jimp

Simply reinstall of the package openvpn-client-export does also the OpenVPN upgrade.

thuyetti

@OhYeah-0 said in OpenVPN on 2.7.1 crashes on some circumstances:

@jimp said in OpenVPN on 2.7.1 crashes on some circumstances:
FYI- If you are on Plus 23.09 or CE 2.7.1 we picked back the update to the current repositories so you can also get OpenVPN 2.6.8_1 right now from the console or SSH shell prompt:
# pkg update
# pkg upgrade -y openvpn
And then either restart each instance manually or reboot.
We had one virtual instance of pfsense that had the OpenVPN remote access server crash every 2-3 days. After pkg update the server has been running without problems for 5+ days.

Thank you a lot @jimp , it works for me since more than 20 days now. We have 3 OpenVPN servers.

Volui

It's seems to be solved for now (running almost month without crashes). To solve problem do from console from root:

pkg update
pkg upgrade -y openvpn

Or just upgrade to latest release! For me, openVPN run as rock solid after i do upgraded the package and then update system to the latest stable release 2.7.2! Thanks All Guys!

ncohafmuta

I just ran into this crash, same errors as OP.
This is the first time i've ever seen the openvpn server crash. Usually my prod system is a i3-4130 (for years now), but i've been testing on an n100 system for about a week now and this crash just happened. Same pfsense version and config from the i3 system.
I'm running pfsense 2.7.1 w/openvpn 2.6.8_1 so the new version doesn't fix it

# pkg info
openvpn-2.6.8_1 Secure IP/Ethernet tunnel daemon

# openvpn --version
OpenVPN 2.6.8 amd64-portbld-freebsd14.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] [DCO]
library versions: OpenSSL 3.0.12 24 Oct 2023, LZO 2.10
DCO version: FreeBSD 14.0-CURRENT amd64 1400094 #1 RELENG_2_7_1-n255918-774957be06d: Wed Nov 15 17:41:06 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-CE-snapshots-2_7_1-main/obj/amd64/GScwGwyy/var/jenkins/workspace/pfSense-CE-snapshots-2_7_1-main/sources/F

Gertjan

@ncohafmuta said in OpenVPN on 2.7.1 crashes on some circumstances:

I'm running pfsense 2.7.1

Be aware that those who are using 2.7.1 are not the persons who visit this forum.
As they would see right away that 2.7.2 was avaible. Did you test 2.7.2 ?

I'd love to add more details, but 2.7.1 is more then two years old and I can't recall any related info anymore.