Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN disconnects when transferring large amounts of data (OpenVPN bug)

We are currently experiencing an issue with the SSL VPN where when you transfer large amounts of data through the tunnel, the VPN terminates.

Client log:
2013-09-18 12:07:01 daemon/err(3) nm-openvpn[31170]: Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #7597 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

2013-09-18 12:07:01 daemon/err(3) nm-openvpn[31170]: Fatal decryption error (process_incoming_link), restarting
2013-09-18 12:07:01 daemon/notice(5) nm-openvpn[31170]: SIGUSR1[soft,decryption-error] received, process restarting


Server log:

2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Connection reset by peer (code=104)
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Broken pipe (code=32)
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Broken pipe (code=32)
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Broken pipe (code=32)
...
...
...
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Broken pipe (code=32)
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 write TCPv4_SERVER: Broken pipe (code=32)
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 Connection reset, restarting [0]
2013:09:18-16:07:01 gate-a openvpn[3790]: phemmer/1.2.3.4:9152 SIGUSR1[soft,connection-reset] received, client-instance restarting
2013:09:18-16:07:01 gate-a openvpn[3790]: id="2202" severity="info" sys="SecureNet" sub="vpn" event="Connection terminated" username="phemmer" variant="ssl" srcip="1.2.3.4" virtual_ip="10.230.134.70"
2013:09:18-16:07:01 gate-a openvpn[3790]: PLUGIN_CALL: POST /usr/lib/openvpn/plugins/openvpn-plugin-utm.so/PLUGIN_CLIENT_DISCONNECT status=0



This issue is being caused by a bug in OpenVPN 2.3.0 (the version the UTM uses), and has been resolved upstream. Details here: https://community.openvpn.net/openvpn/ticket/263

Can we get the fix for this bug added into UTM?

Thanks


This thread was automatically locked due to age.