Opened 8 years ago
Last modified 8 years ago
#714 closed Bug / Defect
segfault in openvpn-polarssl (2.3.11) on openwrt (DD, 49831) — at Version 2
Reported by: | krzee king | Owned by: | |
---|---|---|---|
Priority: | minor | Milestone: | |
Component: | Generic / unclassified | Version: | OpenVPN 2.3.11 (Community Ed) |
Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
Cc: |
Description (last modified by )
root@OpenWrt:/etc/openvpn# openvpn server.conf
Mon Jul 25 09:15:04 2016 us=463243 OpenVPN 2.3.11 mips-openwrt-linux-gnu [SSL (PolarSSL)] [LZO] [EPOLL] [MH] [IPv6] Mon Jul 25 09:15:04 2016 us=464103 library versions: PolarSSL 1.3.16, LZO 2.09 Mon Jul 25 09:15:04 2016 us=465734 WARNING: --keepalive option is missing from server config Mon Jul 25 09:15:04 2016 us=467722 Diffie-Hellman initialized with 4096 bit key Segmentation fault
but i dont have a crash if i do:
/usr/sbin/openvpn --secret /etc/openvpn/failover.key --float --dev tun41 --port 1197 --ifconfig 10.0.21.1 10.0.21.2 --keepalive 5 45 --comp-lzo no
root@OpenWrt:/etc/openvpn# cat server.conf
port 1194 proto udp dev tun0 ca ca.crt cert server.crt key server.key dh dh4096.pem server 10.8.10.0 255.255.255.0 verb 9
strace:
open("ca.crt", O_RDONLY|O_LARGEFILE) = 3 _llseek(3, 0, [2269], SEEK_END) = 0 _llseek(3, 0, [2269], SEEK_CUR) = 0 _llseek(3, 0, [0], SEEK_SET) = 0 readv(3, [{"-----BEGIN CERTIFICATE-----\nMIIG"..., 2268}, {"\n", 1024}], 2) = 2269 close(3) = 0 clock_gettime(CLOCK_REALTIME, {1469436902, 619553104}) = 0 clock_gettime(CLOCK_REALTIME, {1469436902, 620658045}) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0} --- +++ killed by SIGSEGV +++ Segmentation faul
Note, I'm using 4096 bit keys but i tested the following keys as well:
ca.crt + client.crt + client.key
from https://sourceforge.net/p/openvpn-gui/openvpn/ci/master/tree/sample/sample-keys/
Change History (2)
comment:1 Changed 8 years ago by
Description: | modified (diff) |
---|
comment:2 Changed 8 years ago by
Description: | modified (diff) |
---|
Note: See
TracTickets for help on using
tickets.