Here are the relevant logfile parts: Feb 21 14:42:37 astakos openvpn[10253]: orthos_nopass/aaa.bbb.ccc.ddd:55975 TLS: tls_process: killed expiring key Feb 21 14:42:51 astakos openvpn[10253]: orthos_nopass/aaa.bbb.ccc.ddd:55975 TLS: soft reset sec=-1 bytes=145250/0 pkts=1489/0 Feb 21 14:43:03 astakos openvpn[10253]: orthos_nopass/aaa.bbb.ccc.ddd:55975 CRL CHECK OK: CN=Weimar OpenVPN Feb 21 14:43:03 astakos openvpn[10253]: orthos_nopass/aaa.bbb.ccc.ddd:55975 VERIFY OK: depth=1, CN=Weimar OpenVPN Feb 21 14:43:04 astakos openvpn[13277]: OpenVPN 2.3.6 x86_64-unknown-openbsd5.7 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on *Jan 28 2015* Feb 21 14:43:04 astakos openvpn[13277]: library versions: LibreSSL 2.1, LZO 2.08 Feb 21 14:43:04 astakos openvpn[13277]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1193
Feb 24 04:24:15 astakos openvpn[11170]: orthos_nopass/aaa.bbb.ccc.ddd:58039 TLS: tls_process: killed expiring key Feb 24 04:24:27 astakos openvpn[11170]: orthos_nopass/aaa.bbb.ccc.ddd:58039 TLS: soft reset sec=0 bytes=45031/0 pkts=760/0 Feb 24 04:24:40 astakos openvpn[11170]: orthos_nopass/aaa.bbb.ccc.ddd:58039 CRL CHECK OK: CN=Weimar OpenVPN Feb 24 04:24:40 astakos openvpn[11170]: orthos_nopass/aaa.bbb.ccc.ddd:58039 VERIFY OK: depth=1, CN=Weimar OpenVPN Feb 24 04:24:40 astakos openvpn[24001]: OpenVPN 2.3.6 x86_64-unknown-openbsd5.7 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on *Feb 20 2015* Feb 24 04:24:40 astakos openvpn[24001]: library versions: LibreSSL 2.1, LZO 2.08 Feb 24 04:24:40 astakos openvpn[24001]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1193 The issue exists since some versions. I added a new openvpn client to the network last week, since then the intervals of crashing are significantly shorter. I setted the coredump option and waiting for the next crash. On 23.02.2015 18:46, Stuart Henderson wrote: > On 2015/02/23 15:55, Alexander Haensch wrote: >>> Synopsis: OpenVPN process crashes from time to time >>> Category: OpenVPN >>> Environment: >> System : OpenBSD 5.7 >> Details : OpenBSD 5.7-beta (GENERIC.MP) #828: Thu Jan 29 14:28:19 >> MST 2015 >> >> [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP >> >> Architecture: OpenBSD.amd64 >> Machine : amd64 >>> Description: >> The OpenVPN Server process configured with a tap device is crashing >> during Handshake after some days of operation. >> The exact reason is not yet clear to me, but i can maybe gather some >> log files as this happens pretty much every 10 days. >> I think that something is accumulating and finally ending the process. >> >>> How-To-Repeat: >> Let the server run and wait until the process crashes. >>> Fix: >> I use monit to automatically start OpenVPN again. I think this is a bad >> idea. > Log entries from around the time of the crash (both from openvpn and > OS messages from /var/log/messages) would be helpful. > > Is there a core dump anywhere? If not, you might be able to get one in > /var/crash by setting sysctl kern.nosuidcoredump=2, but it would be > helpful to run a build of openvpn from ports done with 'make clean=all; > make DEBUG="-O0 -g" repackage && sudo make reinstall' as this will > increase the amount of information available if there is a coredump. > (If you can get one, use gdb to obtain a backtrace and send that, > rather than sending the file itself). > >> dmesg: >> OpenBSD 5.7-beta (GENERIC.MP) #828: Thu Jan 29 14:28:19 MST 2015 >> [email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP > (real/avail mem lines snipped to protect the innocent ;) > -- Dipl. Chem. Alexander Haensch AG Weimar Institute of Theoretical and Physical Chemistry Eberhard Karls University Tübingen Auf der Morgenstelle 15 72076 Tuebingen Germany Tel: +49(0) 7071 2978768 Fax: +49(0) 7071 295960
