Package: openfortivpn
Version: 1.8.1-1
Severity: normal
I've installed the fortivpn package in debian stable (stretch), and
managed to get it working with a vpn connection.
Somewhen I updated my System to buster and now realized that
openfortivpn can't connect to the vpn anymore. While another computer
which is still running on stretch connects to the same vpn without any
problems with exactly the same config parameters. Also openfortivpn and
ppp are the same version on both systems.
As it seems it doesn't manage to configure the ppp interface correctly.
Maybe in buster something changed the way interfaces are configured? No
idea.
Here is the openfortivpn logfile (i've deleted the repetition of certain
messages and removed privacy related information) further down is the
ppp log:
DEBUG: openfortivpn 1.8.1
DEBUG: Loaded config file "/etc/openfortivpn/config".
DEBUG: Resolving gateway host ip
DEBUG: Establishing ssl connection
DEBUG: server_addr:
DEBUG: server_port: 10443
DEBUG: gateway_addr:
DEBUG: gateway_port: 10443
DEBUG: Gateway certificate validation failed.
DEBUG: Gateway certificate digest found in white list.
INFO: Connected to gateway.
DEBUG: Cookie: SVPNCOOKIE=...==
INFO: Authenticated.
DEBUG: Cookie: SVPNCOOKIE=...==
INFO: Remote gateway has allocated a VPN.
DEBUG: server_addr: ...
DEBUG: server_port: 10443
DEBUG: gateway_addr: ...
DEBUG: gateway_port: 10443
DEBUG: Gateway certificate validation failed.
DEBUG: Gateway certificate digest found in white list.
DEBUG: Retrieving configuration
DEBUG: Establishing the tunnel
DEBUG: ppp_path: /usr/sbin/pppd
DEBUG: Switch to tunneling mode
DEBUG: Starting IO through the tunnel
DEBUG: pppd_read thread
DEBUG: ssl_read thread
DEBUG: ssl_write thread
DEBUG: if_config thread
DEBUG: pppd_write thread
DEBUG: pppd ---> gateway (16 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (16 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: pppd ---> gateway (10 bytes)
DEBUG: pppd ---> gateway (17 bytes)
DEBUG: pppd ---> gateway (18 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (10 bytes)
DEBUG: gateway ---> pppd (25 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (12 bytes)
INFO: Got addresses: [192.168.0.231], ns [0.0.0.0, 0.0.0.0]
INFO: negotiation complete
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (12 bytes)
INFO: Got addresses: [192.168.0.231], ns [0.0.0.0, 0.0.0.0]
INFO: negotiation complete
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: gateway ---> pppd (10 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: gateway ---> pppd (12 bytes)
INFO: Got addresses: [192.168.0.231], ns [0.0.0.0, 0.0.0.0]
INFO: negotiation complete
DEBUG: gateway ---> pppd (12 bytes)
DEBUG: pppd ---> gateway (12 bytes)
DEBUG: Got Address: 192.168.0.231
DEBUG: if_config: not ready yet...
DEBUG: Got Address: 192.168.0.231
ERROR: Timed out waiting for the ppp interface to be UP.
INFO: Cancelling threads...
DEBUG: disconnecting
DEBUG: Waiting for pppd to exit...
DEBUG: waitpid: pppd exit status code 16
INFO: pppd: The link was terminated by the modem hanging up.
INFO: Terminated pppd.
INFO: Closed connection to gateway.
DEBUG: server_addr: 46.14.58.162
DEBUG: server_port: 10443
DEBUG: gateway_addr: 46.14.58.162
DEBUG: gateway_port: 10443
DEBUG: Gateway certificate validation failed.
DEBUG: Gateway certificate digest found in white list.
INFO: Logged out.
ppp log:
using channel 12
Using interface ppp0
Connect: ppp0 <--> /dev/pts/9
sent [LCP ConfReq id=0x1 <mru 1354> <magic 0x54ae543>]
rcvd [LCP ConfReq id=0x1 <magic 0xd554a452>]
sent [LCP ConfAck id=0x1 <magic 0xd554a452>]
rcvd [LCP ConfAck id=0x1 <mru 1354> <magic 0x54ae543>]
sent [LCP EchoReq id=0x0 magic=0x54ae543]
sent [CCP ConfReq id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [LCP EchoRep id=0x0 magic=0xd554a452]
rcvd [LCP ProtRej id=0x2 80 fd 01 01 00 0f 1a 04 78 00 18 04 78 00 15 03
2f 00 00]
Protocol-Reject for 'Compression Control Protocol' (0x80fd) received
rcvd [IPCP ConfReq id=0x1 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1 <addr 192.0.2.1>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfReq id=0x2 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2 <addr 192.0.2.1>]
rcvd [IPCP ConfNak id=0x2 <addr 192.168.0.231>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x3 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x3 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x4 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x4 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x5 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x5 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x6 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x6 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x7 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x7 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x8 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x8 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x9 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x9 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0xa <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xa <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0xb <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xb <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0xc <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xc <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0xd <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xd <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0xe <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xe <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0xf <addr 46.14.58.162>]
sent [IPCP ConfNak id=0xf <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x10 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x10 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x11 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x11 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x12 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x12 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x13 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x13 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
sent [LCP EchoReq id=0x1 magic=0x54ae543]
rcvd [IPCP ConfReq id=0x14 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x14 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [LCP EchoRep id=0x1 magic=0xd554a452]
rcvd [IPCP ConfReq id=0x15 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x15 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x16 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x16 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x17 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x17 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x18 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x18 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x19 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x19 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x1a <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1a <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x1b <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1b <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x1c <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1c <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x1d <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1d <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x1e <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1e <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x1f <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x1f <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x20 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x20 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x21 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x21 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x22 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x22 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x23 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x23 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x24 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x24 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x25 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x25 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x26 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x26 <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x27 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x27 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x28 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x28 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x29 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x29 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x2a <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2a <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x2b <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2b <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x2c <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2c <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x2d <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2d <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x2e <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2e <addr 192.0.2.1>]
sent [LCP EchoReq id=0x2 magic=0x54ae543]
rcvd [LCP EchoRep id=0x2 magic=0xd554a452]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x2f <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x2f <addr 192.0.2.1>]
rcvd [IPCP ConfReq id=0x30 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x30 <addr 192.0.2.1>]
sent [IPCP ConfReq id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x31 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x31 <addr 192.0.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 192.168.0.231>]
rcvd [IPCP ConfReq id=0x32 <addr 46.14.58.162>]
sent [IPCP ConfNak id=0x32 <addr 192.0.2.1>]
Hangup (SIGHUP)
Modem hangup
Connection terminated.
--- System information. ---
Architecture: Kernel: Linux 4.19.0-4-amd64
Debian Release: buster/sid
900 testing security.debian.org 900 testing
ftp.us.debian.org 600 unstable ftp.ch.debian.org 500 zesty
ppa.launchpad.net 500 stable repo.skype.com 500
stable linux.teamviewer.com 500 bionic
ppa.launchpad.net 500 bionic packagecloud.io
--- Package information. ---
Depends (Version) | Installed
==========================-+-===========
libc6 (>= 2.15) | 2.28-8
libssl1.1 (>= 1.1.0) | 1.1.1b-1
libsystemd0 | 241-3
ppp | 2.4.7-2+4.1
Package's Recommends field is empty.
Package's Suggests field is empty.