Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
20.1 Legacy Series
»
[SOLVED]OpenVPN: wrong timestamps in status
« previous
next »
Print
Pages: [
1
]
Author
Topic: [SOLVED]OpenVPN: wrong timestamps in status (Read 4532 times)
Fright
Hero Member
Posts: 1777
Karma: 164
[SOLVED]OpenVPN: wrong timestamps in status
«
on:
August 06, 2020, 08:10:30 am »
Hi.
The first connection after starting the service shows the correct time.
Every next connection shows the wrong time.
Time runs out by about 30 minutes every 2 hours.
This is not a php parsing error or something. If I connect to management socket it shows the same wrong time.
example:
openvpn log:
2020-08-06T09:04:59 openvpn: user '*****' authenticated using 'DC1'
connection status:
connected since: 2020-08-06 13:11:33
«
Last Edit: August 06, 2020, 05:33:28 pm by Fright
»
Logged
banym
Sr. Member
Posts: 468
Karma: 31
Free Human Being, FreeBSD, Linux and Mac nerd
Re: OpenVPN: wrong timestamps in status
«
Reply #1 on:
August 06, 2020, 08:37:09 am »
What hardware do you use?
Is NTP setup and working?
Logged
Twitter: banym
Mastodon: banym@bsd.network
Blog:
https://www.banym.de
Fright
Hero Member
Posts: 1777
Karma: 164
Re: OpenVPN: wrong timestamps in status
«
Reply #2 on:
August 06, 2020, 08:39:03 am »
Its Hyper-V VM.
NTP is working.
All other logs shows right time with right time zone
Logged
Fright
Hero Member
Posts: 1777
Karma: 164
Re: OpenVPN: wrong timestamps in status
«
Reply #3 on:
August 06, 2020, 10:50:30 am »
Additional info: turn verb 4 on and log shows something like:
2020-08-06T11:42:44 openvpn[35212]: user/ip.ip.ip.ip:55798 PID_ERR replay
[SSL-2] [0111112222222333333344445555556666666777777788889999999>>>>>>>>>] 0:17186 0:17186 t=1596704916[1552] r=[1551,64,15,16,1] sl=[30,64,64,528]
so, OpenVPN put timestamp in epoch with some correction?
t=1596704916 is wrong timestamp
but if we subtract [1552] second from timestamp..that is exact right time
1596703364 -> 2020-08-06T11:42:44 in my time zone.
where did the correction come from?
why correction is not used in status?
Logged
Fright
Hero Member
Posts: 1777
Karma: 164
Re: OpenVPN: wrong timestamps in status
«
Reply #4 on:
August 06, 2020, 01:37:47 pm »
banym, thanks for the hint!
I disable clock sync from host to VM (VM host unsynced and it was constant 2min difference with ntp servers) and clock drift in verbose log now is always (3 hours at this moment) "[ 0 ]" and "Connected Since" shows the correct time!
i still don't understand why clock drift continued to grow in OpenVPN with Hyper-V clock-sync turned on.
And why clock drift is considered in logging and not considered in status.
But this is not opnsense problem )
Thanks!
«
Last Edit: August 06, 2020, 05:10:26 pm by Fright
»
Logged
banym
Sr. Member
Posts: 468
Karma: 31
Free Human Being, FreeBSD, Linux and Mac nerd
Re: OpenVPN: wrong timestamps in status
«
Reply #5 on:
August 06, 2020, 05:27:13 pm »
Thank you very much for sharing the solution and information! You are welcome.
If you could mark the first post as solved this helps others to find your solution. Have fun with your firewall!
Logged
Twitter: banym
Mastodon: banym@bsd.network
Blog:
https://www.banym.de
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
20.1 Legacy Series
»
[SOLVED]OpenVPN: wrong timestamps in status