Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-10-2009, 01:48 PM
Junior Member
 
Join Date: Jun 2009
Posts: 2
Post SSL VPN does not connect

Hello, one of my Clients is not connecting. Please help me to read the log. Waths wrong?

Wed Jun 10 14:39:31 2009 OpenVPN 2.1_rc4 Win32-MinGW [SSL] [LZO2] built on Sep 28 2007
Wed Jun 10 14:39:41 2009 LZO compression initialized
Wed Jun 10 14:39:41 2009 Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jun 10 14:39:41 2009 Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jun 10 14:39:41 2009 Local Options hash (VER=V4): '*********'
Wed Jun 10 14:39:41 2009 Expected Remote Options hash (VER=V4): '******xx'
Wed Jun 10 14:39:41 2009 Attempting to establish TCP connection with ***.***.***.***:***
Wed Jun 10 14:39:41 2009 TCP connection established with ***.***.***.***:***
Wed Jun 10 14:39:41 2009 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jun 10 14:39:41 2009 TCPv4_CLIENT link local: [undef]
Wed Jun 10 14:39:41 2009 TCPv4_CLIENT link remote: ***.***.***.***:***
Wed Jun 10 14:39:41 2009 TLS: Initial packet from ***.***.***.***:***, sid=********* ******xx
Wed Jun 10 14:39:41 2009 VERIFY OK: depth=1, /C=xx/ST=***/L=******xx/O=******x/OU=******x/CN=xx-******x/emailAddress=******x@*********.***x
Wed Jun 10 14:39:41 2009 VERIFY X509NAME OK: /C=xx/L=******xx/O=******x/CN=******xx/emailAddress=******xx@******x.xx
Wed Jun 10 14:39:41 2009 VERIFY OK: depth=0, /C=xx/L=******x/O=******x/CN=******xx/emailAddress=*********@******x.xx
Wed Jun 10 14:39:41 2009 Connection reset, restarting [-1]
Wed Jun 10 14:39:41 2009 TCP/UDP: Closing socket
Wed Jun 10 14:39:41 2009 SIGUSR1[soft,connection-reset] received, process restarting
Wed Jun 10 14:39:41 2009 Restart pause, 5 second(s)
Wed Jun 10 14:39:46 2009 Re-using SSL/TLS context
Reply With Quote
  #2 (permalink)  
Old 06-10-2009, 04:59 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,396
Default

What was happening in the Astaro OpenVPN log at the same time?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #3 (permalink)  
Old 06-16-2009, 08:07 AM
Junior Member
 
Join Date: Jun 2009
Posts: 2
Lightbulb

Thanks for the hint with the Astaro OpenVPN log. The error was: certificate has expired. But why was this error not logged at the client?
Reply With Quote
  #4 (permalink)  
Old 06-16-2009, 11:46 AM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,396
Default

I guess it's like a series of locked doors; you either get in, or you don't; if one of your keys fails, the lock keeps the reason secret. Great question - I never thought of it from that point of view - thanks for helping me understand better.

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 04:54 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.