Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - silverspy18

#1
I'm running into a strange issue where OpenVPN will inconsistently start dropping all traffic when running in DCO mode and using the VPN while connected on the local network, but always works in TUN mode. I haven't been able to pin down when or how it stops working, but notice it usually fails when the following appears in the log:

Failed to create interface ovpns1 (SIOCSIFNAME): File exists (errno=17)
DCO device ovpns1 already exists, won't be destroyed at shutdown

and ifconfig does not show the RUNNING flag for ovpns1. I've tried bringing the interface down before starting the server, but still get the above message.

Does anyone else have inconsistent issues when using DCO, but it otherwise works when in TUN mode?
#2
@ AdSchellevis, I've confirmed that the patch b5289522 fixed my problem with the client option 'static-challenge' failing. Thanks!
#3
My apologies, I posted to the wrong thread. Please delete if possible.
#4
I appear to have the same problem as described in the previous posts as well using a password + TOTP + client certificate. However, I noticed that authentication failed with the error message:

WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 1

when using the OpenVPN client option 'static-challenge', but worked when this option was not used and the TOTP was concatenated to the password instead. It would be nice to get the prompt for the TOTP code working again. My current assumption is that there is an issue with the /usr/local/opnsense/scripts/openvpn/user_pass_verify.php script since the 23.1.2 update.