From ffe7c2f1ce79be9f708d89aa4f99a243c7196264 Mon Sep 17 00:00:00 2001 From: DL6ER Date: Wed, 24 Apr 2019 12:21:19 +0200 Subject: [PATCH] Add troubleshooting section for OpenVPN. It is likely that more and more users will update to OpenVPN 2.4 these days as it is available since Oct 2018 and already the default for new OpenVPN installations Signed-off-by: DL6ER --- docs/guides/vpn/Android-Transport-Error.png | Bin 0 -> 18763 bytes docs/guides/vpn/troubleshooting.md | 33 ++++++++++++++++++++ mkdocs.yml | 1 + 3 files changed, 34 insertions(+) create mode 100644 docs/guides/vpn/Android-Transport-Error.png create mode 100644 docs/guides/vpn/troubleshooting.md diff --git a/docs/guides/vpn/Android-Transport-Error.png b/docs/guides/vpn/Android-Transport-Error.png new file mode 100644 index 0000000000000000000000000000000000000000..9b38ea8f515f3e58db384612689aa4178549bed6 GIT binary patch literal 18763 zcmcJ12{e^``>tlvAQUPjbH>aWYbWzm$}Eu~DTGWJ8VHr4$UKBlnKER^R3XYtGLxB5 znP<+m`_6x@cdhSy=bZIl=R9k@y*&G|_w)RQ`@Zh$y6)|#p(ej~_u<_nBqVzk6=W}v zkZk=#Lb8RKbSuu}-~A(m|B=}$=-QKzkW&%=+d>iXD8h} z3CS@MMcFeKoja#`oOGz$He~+fyj2L}eUU5dAbY-P`}y24j0B!x@cpZC5D<0+F-`_;YvitR`kOb`t)niUKYt*KkJP8U zsj;!~+qWTGvAXn(goK35O!cx`tgNhr_#oao;93?K65B;_` zZr*f}yliU9!sI1KX)x3GkwQ6?`<9cF#j}KBTygq-QPJu%R^@AP+kMKd^@jNLr@s#m){B!IH@yGvg+Uo%E z#eci{@9Dez#G(1;oBW?oQ^*nj|QcEf_iq8e%bv%L2C zvmC+q;lrIwvhS}vfBqcX!Yo6XD)r49Ed83a%=hob3BLHJX6tL5;^26dnfbf(U1~%` zL~Y&HBXo3h*f*}Ot{l5DCTB>Q2=V;v?27}HZ$Bj*$7UO}?z#B>l~7ngUb2WVk3Yr0 zk1Ohd0RqCpB8LtgOi8l1SnMinJ*lItOwP($D4~71*m=6krYuInDS$zMjLFf_am$u1 zRBS5P%Qkt|pUTU_c=XM$Uw0k+?9XfXzFH;cYE{5lpMA^A%jRa!FIHIcb9)c`*Hhrl>xJwP#*m}71#9U=H`3bc2N=r1_$+}V$ICV=*4W0adW4|$KT^U zdGh4)WKM&5U1Td^&vt=xva+>Nq79v$D>K72yM-)C?mF>5;o#))FLn_uJJ$EH*SPVR zC>0ge!Gj%)JQSo<4ALqM)niSGtL-PRI^4b;xtBR|$=lmI-=^wia*|wc@hR)>c568~ zyQ$U(yY`PX#2IO6;Yq|@W=vI8>kzdj+A=fs-klH;ah&*`ZnHok<}jvl`}X|W+S;!D z3~qBx@&ZLv_wU~)WhyN#9jL*%?srygo1qspF-Qu;qq>UGv)Exj5G&;C!|H@osGD=VkE@_+X{W+4y=8AfHl#>Y>2 ztSveAiS3QKef##ov4d7M0k^LuW7Wz=4ULRQyGP!AMw@J&bN1VI#zs^Ss6=QT5`sd?D*uHH>u-e zzMG`?Qs(QL+=SwUygbLD>H~)kjkrmd6%-8Vs;MpHSk#uifA320J$=l1dSG~Vlut!f z$p><&F5Zkar35>`^wyh4<9fM0)sm*Xlkm*Nly(72)Hf%5wxh6J$LSTNQjP(&JzYH z*U9!Q%5t(DThEx9n&Om}Rwzb$b7MV4CBnqox}HTrU7a|~B_-=aUxLd&ed0ALjgE@4 zGBq8-Qoa52qPfP<-7VW{>+0e#zrTA+n9e@*^^`R;8(y9rC1XmI^EU||jz8DkLwsz(qmli(s>f)~+1_p+Og$27yR>sE0wzm9CruEUMnt#84|GqiKbLmgKkB^V@ z)dGj{=J|=XoSYmC1+q+40DV`ck<9dM-O&9trrcb^W$VVRqYZIow-P1igN4z|aVGBoT-QVz@R+dSkr z`QhF+>_!2ZRNQ2adENCY6>lG($Fd1ciSmQ_2eJQrDEwp_;$#}Ct8=rnn_F5~y{Lz1 zhK5Gi*x1^>fA8q*bPyD1ZfxY>;Y?3WMc}_0Fzr_Q;?0{*tiNyHLMSd=zWg*I!tCnR zo0gXGAFL%k*1{V`CB(#Z^!000_)V*WFkxN!HiE{oii(O?uDtN^sfzR5hzJS!R&rHoB&Gau35AR-|xt@GSileGIvqYxm@y?ghV zR}m>xA_Rt0;ym8F&cBhRJwQdJsjWRaG{j=B zlO&W}ML6DjSkl?{^yv?{kwVLsf5((1qB7=KKp<76t%Uq1XI|}j@0Gm<|Zez5fn^JOs-#l6A+-5DsLbi7Z)AP zP3adM9j(XH|LD;p+?9oe#Wa6H>$;6`6+Rp9z&@LU_eUy8(n)@KPEKxRdHDbV8B54* z$#$)HYcUOik1YM~nc+XfT%}*@>gvAKN!k9%FZT(=12yL#x0cOV`#F)R?QZ`kzYoFk z@#Dvvk`B)EqJ7c|3fRE4hXe$3v^?f-SNJQeSSTuv$CuyRwQr*=x|?|5J>NTw3#_i6 za-5_MtkN%Wy=_k>ASmb}$q-m|b%E)`iATJ;*`{BxKV^>}h-=utf4`H1!_c%d4X?qK z?}qu-^!TIq4wlBoOsb9p6=V#7qONmezyOgW3sYSVRvsQ6U%q_F6&>z;XXRk*<|dg# zgv$(pZADJMfBw8aEoG2*gD$X&e9s=!&_By=?_HIY9ytUsNV_TY@o;ekD;S(V-#cMG`^?7ZPLhI|-BSmc(dRRR@H<3X? zTUsIy%Xkzo5kyw|x&tmBx>FLW7=6nM1+it?2(yLr~eVr@L!CVF17mlk{%!_ zp1?d^o|rPdC%<98^yg`9EjN`W)wXT!)A`A25o^=AoPhBN7-|6lN=jdm>a{LuKbAcn z5hcLi_}lt=WJH7u{^|qs=2ItiY#~x6TwBN5*xXF1&goGC>_U%t`hrHQxTHio!$6TV ze%BRO0r~wI`gu3Tzo#EjUHHNtx95lmx0KZS_jLUM{g$>i8QULsgM+C6nzghTPMTEY zTDFifadL919F~xf(AI9l#}pKZnHyVLTI%S~GMQHR9=I{1Z)mta7$`$Y076ds-TSSn zNw>^Hipg}eJ_e!L%;-sLYwLhn>zk#er5``8oIP6(Y(RJ92o*u>s2U~#gQP&(QF150 zqL}8!S07b@(C3siG&FQ{9hh*Skmd^)w6tO+U1k6@tgc_@y!mg571?2%o0TkX#^ z89(Hy-Se@S^%mI+)IpS*x_BN60wpEoZgO%mCWI?yF9e)(`uh6fx^8a8OP?;6xHee{ z?O_O%C*|bhqcIW#8k_0c^8BKMgHT+<;=+Q6pkQ$CGWH3>dM4r{5tkkjJ0GCyklDum$Y<-_I}aQ<;1zVreuRH9Q6MY`kYGGLeRqg@>K7d?rHdD- znM{9vdrjF!kBQi}bt`r39wig!wA!X@p5WB;?^HOb5nN9(GnY3s*nECMH${8)TU%RH zc(^PuwwxRie6zxF0Rc*xY!r2E;v%2=Jo9{m-o91dvAlzoH3=Bri{h|Mw7C1ogZLr71DNj>bpQTVaj)Q~F)^y7E(?>oHTsFW`2DsOrlhck z)$HB7*D%N2KOkV=UTPHM;<>rocI{Ibb^4yB3y>8e*8NC7%cK&!3lHeBGB>U+z3g>~ z;>}Bzl6;=HOD&0|6?Q=5SigXNNcg6Ietet>{X1&Ar%IN7JlM~YXKrJ&+2hp5**!Tm zIk{)=US%bvYgKn2Ja|y7f9+}_rPDx#--{Q=@Kngx`8C~IPoF+T$zy%(8vn_YegOf= zTMV${i;C`?Ki>qH&Sz9Ad83_w?c3I4Pp<7kb&n^;Hl``(Z591CF)@CCFf&Uod%Wq# z$6t(Yjlml$T%4R8U0r~?Ql1-Y<1II&q@+4Uk5T$jGO`|`Ie38Z^=nO>R1KYkV{T!D zF7kfy9YVuHR<-MuO}~H>EA}!A=<4VU4GlH!TV7jpBUF2CFt3U~u3)7Mee&eVXa6Hk z8*9t$?d{0-qobonWgdq5`bCAzzv^Qo($mtynM?BW@**O1Q$@XhPE2It^^f;=AYD5- zIoSwHF?q!v)z;F=t|gTUIZR8dP-bRgLLhzp>eZOa5HV<|bWZxzzg(jJv?yzjO@@*ElXWp zOI|xv{4TEYAwPqoa=!ssVmFRQ!;|KhN1V&UNM840hRe z&OR{z+HFD` za^eX-zRi`1%w@NYWYwrn0n66~U}wM#O^lEC6uY#bMou6f9jS}@_3IbbDZ(Cu$PFEK zmy3HziYtv}&)>?rckj&NujD~@cdP4G6+Y^bv{C$cHxH$+gOigtPz9%@agUqrxOz3X z(0;wL{DA6SRr;6=)Enn2D*=n_q_&oWPBJu<5)>5V;ZZeb7c5c1XZ8L}#&nN!Uz%g- z>h6|gV!Br|oL#&>IO)uTopgr}KlJuaH!6$motL*rzP@C~=(p_F5AetOun_E#K3U5_dqmug|&E zVrPaG^JH{PAJSIQbL;(%kVm z6nHGX&!jJv0DYf5`ye8ME{6VIy&kF$%kjFelH?YOhKBB6LjV~zanrt!9}iADQ_c#% zqq%x@5P6G|;IT5EqDAF2@%<*Q@(LQP3REt;v$`;a9ZFA6KjKJoI5bB5wh{;RqmaN_?`)UJA2nlr8E+4#m-rxblvuBwF z1hTzL_gYwtrfO&At=>LP;{5v)slJ51ghW?!c5`@pdvtU+*qdbYiI6A-r94XsgCnS@Wk~>b~Nza^}Y7iewN=l-lcKGfU*B}1) zU>6xvOS0-jL6z<5($bT|!jFd2UKn{SCj|u51AeJRi!sIa0aapy9Uz4A8h-6QAZ}7Y zs;}P#5@Kz>%}8YccZqdCMUY;d6ci^U^kk)lJY|-TjEdT|YuDpGYE2!T0?$p4l?>;L zNVFUr&QeB<3;s$Y0jz9n)}6VEh(16f4!+j*@joYOsY!~DTy8nHcbogVF$05et1um1 z1hN~CBu8;Z2Jfn+NL+)>jqAm92YWt6P`PV}xl51!F)laV*KKt#KE5B1gL2GssQM|& zXXEmRx2HPizXY>`+?f+Axz=<%qKB4CD-9Ip1fnPQ-?eMk)YJlUas=&vN8^DTWHygd zP`q_tU8t^B5T7@7b6dl3A>o+TFH}E683A&*hn6rwpyU-qt$n0nX zP1&b&7JFqJC&N!48*5Igd4GFCe9m>(svN6*70_bU=&b*fCogUKnY`RK*B5j1e+XOb zCZUk4b~4S*&W;wc{8aa9Y-lJ1GpnWTvcNsskrN%-g5j9^IXraI!T0s+*INzW1q1|~ zIdcZJ9LiF&721`>-#BE4gLMaknzg}J*jpNgK`+}!@5aoZeN<=m)Iy|qUQ*bVypkR(o>GH#2hidRV zm_OWbAD=A0HH4`LCM)T71DC(z!R|9Knm36taf@L{v!4uF6#J|k(TU)>{ePx8n^ zp9?tu`GJwY1O6-i@8LyZWi@eo;ydD=pC~`z1+n_?DO#-Xqw=C~rF(TYtJ^a|LXPp( z)3`YG-%CMnajoccP7>!`wm|+BMYetF#29_<9PkaWJ9Gen7Fl`u)z#Jg^y1JMf+#M4 zwJ#|X$&=kSVfX_SIMQ)_gp&e*uijeN5zaSlzAKWZ}z3nK}D zS3oOsz2_F76zIp0oK{wzC|Tjr0uH?*MF6-hI$Olpsl(~eI~Lk9Ha3>a|LwG~!4{vRkM4(b8GNUc_2h$pEa66L6;B_@_j-#UAC+iC?S zkvZ2D?j2D34bwfRe?O&anIR{=XFq{&-A$*yY_<>K^58QW%@7f8oL>=`4f5 z8{eCoP2vjD(w?}R#A{Sb-vZmz&aS4Qa3xNRk1x>O1jNsR->@qiQm^o81$KsUTzgMX zjQfDke#UHd?l!^i!`E*kTu)Nf%!gZ|?pp8zpHeG5JvZLc!7gn-vS+mdc%S(4q)lOI zkH5b^{oE|dYpw-96fCwOTj%~t5`QO=!g1J8wN%*g0HqmOD}>;+HF{ON^&)t;blq9&p5fbAQmj3L_(3#+uMr`Pf0eWhv+4$F>=dtoxlEV>xWfJxtA|ra)SkvkkEHC zzI?eCY0?9f;oc)6Zfnz3F>k|>UjTsgwY6yu9r{k7Wuo*`ixGbw8*2?k)5b=f2DN{3 zN{VRy*YTDVC(yX4ydh&w57+9UvfQ(0&yby2+eKW26>$6ZyW&&VaTsTsn(yrkJ@oDS zchq>41dxPgH*Tz59$xp)WxaRWcH%n^p&Ibz{QTWVcZ@#y&doW1Fv`vrkdi8aaI}{} zvi-w{7kPOiD29K0d;p@T&toTqEG!g+ zWVILw(%c)NrKKAP>Xn{~c#f9l=B?Yd0ZN1cOAXrrkMoq&g@=a|6Bo+msVHU%iK50v z4L@%LS}qQbaDL-Y&~;dPFI>7*nV+-+Z=QR0tokYQ?=JP`BbLfwpD%8>ISqM{h3-3pMt9SV`mU%ws?Vmhmpu6OY8;rD(VFOo9tto5r{`Y$iQ&YjIRTO9K8gl@FI#plMaZRt&G z6Ri+9etZCs%`2!bN>uRV_Oq(0H=*qz0%64uSWF2(t<2suxOe)PHv5UV2AbX8%{9CB z9ld65E=OAEwwzsi(3?Qy?$>W$^{f^Z5?TWQCu7>NV+SJNQ)g`~19|xrkn+&~Vr-AS zIejdsP#Ys9P@~Z+5XNg<_~vr2<8f`Wny6BGeM@r2^mhGBrUy2E26ggy5rsx)B|I7Q zGfWoJea*5sibw5k#<>p!)G!zCC^=wJAI;=7_q)%tI*3Vt3i=AL-Kr0xhZqnF%Aj!< zmzy`I@Br^+qP|f z>MDwg@!G!ZD&fbpzu*?*N`q(x2u0Vm(sZyBe?n;7wPS~Bgn)P5&a(tUeXP{P)RYva z)iLc%a>3TETZM##K=Xp$`!a0zySp$kJ|6opAu;j6{rlE^rG`jF!*)I0-MGuofsA~; zemvR{g6ldTKYj!}fDSc0y9{Rbh`7TTHps3$w8u(xUAh#Fjr#$^GcT7YP1NJkuC6ivAMTCW)>r6l}=HcT5gKhBMfm4df1yK6MnFj!%iMA8Ry}+Gq08QrG^kuw$ zeaqJN&-{E01|C!%sFlT!yBHfejFJ(7-oADXz4YQkSb#g1$;+f9@X8|q=wQGMc=Hhn zp}GQ-h3MAIh%ks$X6VqrvtiKHI_i+Y4}CB+z~``(tB_B*B`@~d5vG?IG9I3(^8GR| zvqqnDX_GR6Va7&>QzU^Cyh#H-9UQjQorR^96{Q=ahz-zI+&9)vQ3XQ+#R2hYbEbw* z<*JE@^tHwp!dBmjf{h|0>RviJXd!IVXUL##b>>*?k86PV6dD&7=io#>C39_AYoBH9 zt9g)t<4)|Vko@Ow` zA|kR-!&k=5$7d1B0)qi7E4{Sa61bfKVQZ6>dvvaXn5JMx636sKQYNz`{v zr59{JGde6FQ~&uh@$I}Q)YThM8~9~Di-~cc8B!#W3ep}&@a-+RGZ07;l7HJzHi4L2 zfbwgfLASwyZME>LXBGPmx;M|zebv^S%&jhE4tDR3{{*rbaC!%$16Uipg{YXAGjJ8< z;5O=Ok~bb1_KN@Xl{~Q)v!mm$Cc}p%RRx-$xVpOf&@%+kCR28`=oiW`L%3`TW7mPB zL;W-`F!1LO%Fc(=&XS-U+0|oxZCKdZQ?ODb8Gg?;$f&ESWn^aZadDB8kzvUCr=4Zi z{%i}r;5LXmq~W_<+t9$r%Ug;p?R$XPSu!>;@v5aIXYgeXYBlW4szC^vMkWnWk&zGg z(SIGB{+?mTHT@klp^IcJ5~O{h$IOtQYzFIh*Oj@~s7e2-CRrLB)J9>vo6}W{l{6l! zQ~9`+$9$zh3f(6ny(&&VG4sj00htXMmj_Z|ruPfy9|7b~=Yh+~>o7{Yz zmG#u4a&3K`Rf`w`(&dv~RH8&w2bhO$8Uh{0`vHE;!oV~$GlPi&%OWZ&`d;$bu@~Nw zd3y79m+loCi5KdDRD9&`pVS3;OVQ5G4p{_rFPJXGp$~)8xL4+0lY`ch>4%DnZ+|=B za&c0ET)@S}r6l>U)gbp1M5=azfOMRCFq|Q$6YA>1PbTK&X-VGF(>v^Lg}63QGg=pg z1wsscPd5BY3acO2bfCN00}6M!~^2Vhhf3#_wt({p*!?o zxsH4nw;LjD8PMO$3?v7#c&iavsLVPDKg65b8Ngg96Mk)nuY#8mB8B5d`$a7T`S3AW zNi(=bKzlh$_GX*aP+PGR;v4(=;_`yOepT|*`QFu~KS0rJ&`SrUIE4(mw4M5$N&3YB z;x_9MTypJvrobW&QP6z?+6f+|KBi`HI+V|-p4*b?$(5G(OKuwgelC)|FBOAXt}|gT zc;x8qW7f-XbxA$ld;eMLL9*>zWn^Sr`GKS<)Q?h8ouxvw$}gGD)tj8z`01#@aB!)f zU~gPub=X7~%JQD18%z)`0=ICI6yAdpGu2CcDUTTS_U&7WO`^gZ2SzV}CX#}XsZs*r zIW0})o`A)hcl!C(1DqfmOTprS1_18U$#R@on!c*{06V4i`}a`V#It-Q^0Kl>5AUL# zDmlI@=`URy&+oml^PsizoZU|M1N8KD+}t39@Tp#~o;<8G@5s#<8ZveL(%08#lyGQr zYAT8E-WTQm6IXOK?A|5dxthl}4sq)oI~n@{&(+%coWc%KO61q6RmKaUeiFQajRBW6 zX+L`00OFi9e0D0~{$0e{Vw#MFDgAKMV<%$^4_851e5TX<&Pu!Udc?N< zK)Fa7&II2j{~3op$NoxBbJC)g7|{nCd>|jms;LejR0@z-#cpuM%Irk0CLz!eGHe> zNQjw4ytW)J#g<5F5lqyt;Cu14w#bCqDv8G}cTV3%)Ntqz|)e^+T z)XU<|drX^yTrx09viYiC*%fp`q<4bQ<#i~K1MvzcQ_D2QHRqSUkK8m~K3F^GhbJJZz zqY<|ZwN~PiGUaY>#C3Q&fZq^7Ky>f!J5v=>n4LWXvl*-~aUmf>P%*b`+X)Fb%?2T0 zW$vk!h}pO!I6>vV4u%e? zvAgkhDrb0r-gukVzO3i=g z44e;JSzWr>wQJ5G)2D;Y@q9qjh30d!i;HD;!%76gCnzPRvFl}=pvS;%m%7Zd?cFjp zH8sB71Oz3wdS2w5#rv{)XYJ;5f@(xR+oOAk&ztyF8641&0~>=0e1q_<+bk_r2GEb zQiD^sMZ@b>+YXWSG z+jazi27}rVDV&;|JhHYt3o>v^X~+E$yDsUyNs*DA5BDAc0!OOxKwYY4cjwvZV>*R) zW-2OA($lA~K`;~%KYjiDELVkk4;?zx=f2njmmoYagM))My~T8ljGKT>P^EV4+^MIp z&()|FIdRRbvFQ}|oywvAdP-2!w^4BshX%A8dz>55@Bo*EyZbs!ig|-6jh{6P47$%0 zj*XoNNo z9E1~~0PBuk^mAiZ*D7jPBx(qlz)jc_s7Y$aYW59JP8P!)11L(Q@~7_DCBH>b`dm># zL2&%l%{lwVwCF`!CE$MP+Dr|6!JgBVG+6GyuWO#0zc)D>)yAdqSwE@f=F~uULO9d`vLEw#cr9bN?#4FkDtS+gNF(TH%a}wicO(d zHVnufKTj^W=#clh<(7+=H~kC0}(YG~f-aN>oNc zbB?GfC@3lYEGVA))e|Mn2~TWPZc%Ghl}}x?!_)xKSV~+euo}>F7`X=|SHdME+(D$w->R?V^H(3~85`H=SidZa5K?jomC z5sn`}4yS{HsZ>g`f4Keg5s#9fA)9;d20ejlq8SCld$9 zQID~^`_|RgzRbUv`|evv$e7etto4^=w{Dh6J&^)CE&hW8@G~)P>xZ58_Kzw|dvVSa zHW>Xp_~nYA-Ka*1_^BtcZ^VP3p&aGl?($1b<+|x#w!RQmQNDG_O?s-|*3Rx{S3X~j zp_$_Y)hmmK^(>1l{s<@9H&Fc*$`Bp!;L3rmHq1bEhhH~Z_Eq$q;O2h0NSBxNQ{w&Z zq3h>VbmYp&2b7eRJ)x`tu?728OQ;Wy7f60xjqz4HAcrECSVKbSlp>l0#}V~jmh&7r za%9{f1?!H@i>OixFnZd87D8YYWEPs8orS4aHIR3}*yrKH&!T;9XVp!>layC*xk<-e zR@W`GW2K+(k(=x0;NnV+kN?=%_$M(?+BK$iC9fR+yxyOlqQN@2mM^A5K z!e|p`v=OV29U)tRKfEUT1wX^E?bjX?YDctIqbQ-_(Ib|l3=F+cbf~C;A@sC#%)=RL z$#o$u23hjPROdT*pHAWVrw6Mn<*h+xmaw}31q;|j+At|GNI2dAvLgaMx(gZ_K}&-S zEX5DCIv4hoZsf7l!<5$15wTz%NP9AYS=t0fViY7~yLWe%d2Yf&2-oT*Jw3e(7rb`e|j~lF;32LJSo!rIxywYqelV3&n4PxYC7Lb*Fk+2HW>pm9yPqlE#$0d@s2liF!IP2F>vu&zTPgoJEaG-FwHW6SJ4E z@ADC~?iO=BvDtY)Y6tnD$?n47-bX}6aCFwtz<_9RgwxV>fBvU@_kE1gYqb%ALh^_} z{(gQg8*7EJvAqfB9z)7Kv+EM)cQsO`IQNAP46)B1I(SA;|7N>+?HcM?a73RLF1dSu>tF=5}Z6dJiNRkwqoF?ZbtZ@WuY7%9SsW$o0yn@8S5?gy|zZB zgY`e6t}A~-V8()RnwBqg41zj{aE99eMbk9hgMODn1Q%3N;9FXGFZEr%nKqTKz(R=+ z3keHLef0`4F0s{qETDH*G)g|=AbUq{?9waz=cOf3TPIU=Gn-P z)+W|I3htQf;B)&OAhw<4#q25f6$f2iBF$B!Yf2py9*#vLYd*(o@9H|%$Ru8o?OixS z@*_@d3-uNf2L`l>fb)9~$rc2%%UM+0LRk%R@ggi3y*zuX4^4Il&} z5J(w^4OWtCtw)M9w?VM%y$}7g!3=S*45Mt+2HHb^{|9SHNEc|tn)0{h|%0h{{ z0X8Zu_G>7{UcGvu(tG9OBiRIuI#>=kqH+3G;f*6ahRV1SCKq^_d$?38AMGId0jLC@ zD2h3jtf2D#SEv_%{)8ELV|^6~MkL=AJuBC)aS)wl89G@6==A2<(7+gEJfcg{N0fyk z$srQKH7qoglCX0REk8EVbbhRirw0l@IJ<$g-^1&U{)|tkyelic%lmU9naK>_JLrNI z=xSwSnW^lzg)0YIDgpxhK={`zV?GY`46>yc1uAH?aVQjXX@3-eJO<~t=7kF=tTrq& z4KkiTZ$()JEEuVuicb;{5IA`m4x8Fr9t)$GP~>jFqM3DU14}5nX%8$sY#> zvU|}UIRfUU%)RY-{`y<)P*BE(1-AFxOJK~I10`SPN7ATR?hCF54TAPAC_d%nK7(q* zb!hEjn*C!7MhC%hWN{kYbI3AK`CUae3erf4+D4)I`T2nwY)03qPGLXxC#2q=5O{(6 zC!xO}`TuH8QcgWZneyh%%J+9<5z8ldc|8Eo;1s-Z;|9@mM<0ipzUcz`9iKZZ_ufx} zDIPPxa^h*js0B1BGqd^emQh6bQ0X1&ii$9by_Bs3?ajtcJUo#rvEPHnBCgCtVN`;G zj?HT585ybDr@VgM@oVC1t4BMH^3|)%vxZj^v$77z_>wfbl#@OLBq3HrsuJc$4j&%7 z#fo07tgI%`Tqe)a%Z2F{@a!$~EGy(E7^7AOP)y2%u{$k2eSU84@R1{N((Za%T5_a{ z>gvRTOd4Hcq4q59BFhUR``C;yA}Y2)5fO#p6$lO`3_hat*}iL6OB=D-<<0`E z(yuc!JrOx?-xl7>iuXqO$X2RlXEy^H!i&JP-U33nvGFaeN$l)C3{Has1BVYEPF9cW z?e4u?VEeJYUJacO_XaLF8!k-AXPAHn3-(=Da`S*h=-va=A>X?fK3q00a6e+Ktd(EBydFMUB3Lnt`hERRe>s*CXyDCm!e2sIB+IubKz~Os&8!Wddnf z&HVH<+&QN2#l!Qhy9>_jx@=q6jV2JkzMhjboqLF1?P*SqEko>Y&5L8t^C-*N& zJQI0JSteUZoU6)7zqYq8!CZZ%KBA%zDwwqN?R++tEwN)ri zO-s9BW0Q&flAg}v-oIIb9uo2E-#Avp5eZP4_mCqwK~#5a35^h4o*&@0s_xA(jXHwwLy%4t6zXwZ)E^*Jv~70TGj0ijWit+5^+8D_lhd& z>gp@)XPI}dd_pk0yvJkyCqn8aIk|^0XBN5TF3}&~&mc*A(!@*lKB{PyaQ-cI-V_5r ze;z(`2q5d+@$-6mk#k#${CBKQb_lYa#)E|v>OzZ#8FB?yatKrGqM~7ROzlNZHW603 zdc+>)<{-!`Da|w~Q0_PX^q-ZEGcqu68~nT%S!1EHIrQ%hHX2}gkNY3WXeIQcA3_@TXkp=$pFy7R{6@ zn_F6x`ARw>HqY%31q-n$bd8l22z^Av8j3LZ_i4h4Av1F#FlcidocIoJ_bK1h4cq%S zo!}0tzkD&~J@L4&dvmObxl;;lWU_% zZSOw!i10APi+7OO-(Nv7;saN0=Wu77j*34Lgqk2WgNOMKXFM?`sY>gn@^flBfSi+uQCWA-qI7nZT`%DhwlC~#I_I8rhsf+JyA;zop1 z)RDo2v@}VxuOY~qXgx!8?Zs51VUc_BO#eS`69tq$t>UlI(W>q*x)(22?8%>ON!cHq zjB0dFqw3Rzh)p!%_ZH85)E+`-bTjdL0TcsW=H7b&rqYqY!3Uf^ zm5Q|-t;^)0s*87%l7=Cq)6&q$lLA2Fvl2r?57kWNn;8;e;Y~o?A87iQc6&m1htI<= z<{`Dv6CyULshNPhC&6HD@b}ogdp9K&6}%4$ccQSiRa8{Yo%06mI2V5nJu#441a>dd z`=1Ke+#F$3y^g`K=(6jv`k)f?ZDy{ymcKT1(G6XgV79P_urFcm;8D?T<(YCP8A%%|qkG&WX^taEyYQnp&au{?{wKuX7K( zE&vfAFe6KO1wrLMsi~dS6nZ-oo|0h7n-9;$0-$RlN( zr@&$&H!kQWdZYcc#LtrA;+Mad(8m7u-8=U`Keikw;+iix$jI0*mzpnbUULo}31f5jq+lMr;d3%p7M41Ti2`?u-7Fk%y!afh!?!)OZo8Vpvn3KY!<{ zt|XDc6>L(um87vrd_3kV0N)%LsTYhg4{M)!)AjR7-}8c^-y+ClpZp1Se)C2Nd!?_@ zKY@9^bTf{GdMngK}?`;n{=Fb|nu(0=YpJIa^5B2Vdh#a(XjMdR# zDr>!t!`%Dql*BoZK~$v*4N|PC>gs_J**V@{a=P3NBdEC!k=$JrdV-e91MBe@FIX3CJmLd?gJ>9!gU=XIA8@`9ZB<~z3`*Hl)>?F#j8(I z)yr%wopsyFAx-QV-@(QYNnfm{iw)XNRFQOZ{KVInI$0zn4zJW)t?MLXYS2(os9cOp z57#ih@gmm8#o4)W7$HDST|F~1lZJFVuqv@zP*fDn8JxVlYO1PcYJ+Hpin#g(yFNTR zTBRWzHxKXz#~1#juf07yEUaoz4Z6n}B%R;R#a2{Sp7c3u33|n5yktYA6lv(u$O6nKpq5w zc}Q{L;>9^YSI}T+LVH_UDviFc!e{41>qWk5U5G?%MP$+K?R?Yzp1UiMxKRG|dLKaX zSgRqHoT3+rVTy^Nr>};`PKxabKR-X}S~O;p(iepV2QyEn@nNMH8TG+z<;O?-jsck3 z=8-H33NWe7Rqx@&J{(brP-jQdw6MM$l>FhqtKgsrK4dnOs#%f^S_N0!-Q2cs-QqrT z+srJf;;a!F)A#S+A$Nuq7~fM{#HM4RAoU^`qkp=hk{X?WBf8n#sJ;J+m=@;Q24U{2 z=ZQ$6HRaFQ_h^q#uNfb#tYyjL7izl{FarMjQW|H_Z`L@Jc1^ zHwW57mHrs^_}W_2&*~Heq-El_35<__k!)RYPlQb~JsoYuBSYpf{m5Il50?S-IxJ2a*)0 zDMHqLv_W%$5r%mFw*<9u`MPVm;RNs??xQ*BF(|Pjr^Up-yFLJtUf=rP@8=NbcyfA^ z9px?u=|8^iSx5T2+zxU#wzrzOtWRM_Byu=?- z6jmQ(NzMak7OlrNxmC6kujDGRP!gRb<^2@mBKOPt@wGEMckN2NhL>KL!T;sw=O^?; zBQGl}UKte=z&|3R#%a8IOcQ-X_~x6C4do6mM6IL8 z%22q?dO~Lhe`xcsD1$HcnN!E#6w5$^x_b30{!&k`)0>=T?20eY<{sEgpHjblGmPGNKnrsH)%KiTVK?@sX literal 0 HcmV?d00001 diff --git a/docs/guides/vpn/troubleshooting.md b/docs/guides/vpn/troubleshooting.md new file mode 100644 index 0000000..bd2e640 --- /dev/null +++ b/docs/guides/vpn/troubleshooting.md @@ -0,0 +1,33 @@ +### CRL expired +OpenVPN 2.4 and newer check the validity of the Certificate Revocation List (CRL). This can result in a sudden malfunction of `openvpn` after an update even though no configuration files have changed. This error manifests in the following, not very helpful, error on the client side: +``` +Wed Apr 24 11:19:07 2019 VERIFY OK: depth=0, CN=server +Wed Apr 24 11:19:07 2019 Connection reset, restarting [0] +Wed Apr 24 11:19:07 2019 SIGUSR1[soft,connection-reset] received, process restarting +Wed Apr 24 11:19:07 2019 Restart pause, 5 second(s) +``` +Android clients simply report: "Transport error, trying to reconnect..." +> ![](Android-Transport-Error.png) + +On the OpenVPN server, the following messages are logged: +``` +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp TLS: Initial packet from [AF_INET]aaa.bbb.ccc.ddd:pppp, sid=57719cb8 77945ae9 +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp VERIFY ERROR: depth=0, error=CRL has expired: CN=client1 +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp OpenSSL: error:11089086:SSL routines:ssl3_get_client_certificate:certificate verify failed +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp TLS_ERROR: BIO read tls_read_plaintext error +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp TLS Error: TLS object -> incoming plaintext read error +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp TLS Error: TLS handshake failed +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp Fatal TLS error (check_tls_errors_co), restarting +Wed Apr 24 11:19:07 2019 aaa.bbb.ccc.ddd:pppp SIGUSR1[soft,tls-error] received, client-instance restarting +``` +The error is `CRL has expired` and can be solved using the following commands: +``` +sudo -s +cd /etc/openvpn +mv crl.pem crl.pem_old +cd easy-rsa +./easyrsa gen-crl +cp pki/crl.pem ../ +service openvpn restart +exit +``` diff --git a/mkdocs.yml b/mkdocs.yml index 67ab6ce..3bdfe7a 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -96,6 +96,7 @@ nav: - 'Optional: Dual operation: LAN & VPN at the same time': guides/vpn/dual-operation.md - 'Optional: Full and DNS-only': guides/vpn/dual-VPN.md - 'Optional: Dynamic DNS': guides/vpn/dynDNS.md + - 'Troubleshooting': guides/vpn/troubleshooting.md - 'TOR & Pi-hole': - 'Overview': guides/tor/overview.md - 'Basic Setup': guides/tor/setup.md