1039685 - Trouble connecting to the pek1 VPN

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: OpenVPN, task)

Description

[Jason Crowe [:jd]]

Hi there, I am having issues connecting to the pek1 VPN. I was able to connect just fine around a month ago (whenever we did the last mass password reset), however I am not able to connect now. I am getting a TLS error and tried a bit of troubleshooting with limed via IRC with no luck. I will paste some logs from my end, but as I have no access to the VPN servers I cannot troubleshoot further. I was told that the keys have not changed on that VPN and I have not changed any configs on my end. Also I am using tcp and port 993.

Thanks




Jul 16 11:07:05 nymeria ovpn-Mozilla-pek1[1119]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Jul 16 11:07:05 nymeria ovpn-Mozilla-pek1[1119]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jul 16 11:07:05 nymeria ovpn-Mozilla-pek1[1119]: Socket Buffers: R=[87380->131072] S=[16384->131072]
Jul 16 11:07:05 nymeria ovpn-Mozilla-pek1[1119]: Attempting to establish TCP connection with [AF_INET]223.202.6.5:993 [nonblock]
Jul 16 11:07:06 nymeria ovpn-Mozilla-pek1[1119]: TCP connection established with [AF_INET]223.202.6.5:993
Jul 16 11:07:06 nymeria ovpn-Mozilla-pek1[1119]: TCPv4_CLIENT link local: [undef]
Jul 16 11:07:06 nymeria ovpn-Mozilla-pek1[1119]: TCPv4_CLIENT link remote: [AF_INET]223.202.6.5:993
Jul 16 11:07:06 nymeria ovpn-Mozilla-pek1[1119]: TLS: Initial packet from [AF_INET]223.202.6.5:993, sid=be33073c 07826e25
Jul 16 11:08:06 nymeria ovpn-Mozilla-pek1[1119]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Jul 16 11:08:06 nymeria ovpn-Mozilla-pek1[1119]: TLS Error: TLS handshake failed
Jul 16 11:08:06 nymeria ovpn-Mozilla-pek1[1119]: Fatal TLS error (check_tls_errors_co), restarting
Jul 16 11:08:06 nymeria ovpn-Mozilla-pek1[1119]: SIGUSR1[soft,tls-error] received, process restarting

Comment 1

[Jake Maul [:jakem]]

Same here, using Viscosity on OSX. Connecting to admin1.pek1.mozilla.com, port 993/tcp (UDP also doesn't work). Doesn't fail per-se, just never connects. Log seems to indicate the same sort of timeout behavior.

Comment 2

[Sean Rich [:srich]]

Jake, is this fixed as a result of the work you did yesterday?  Can we close this bug and the dependent one (1036188)?

Comment 3

[Jake Maul [:jakem]]

This should be good now... should no longer need anything special to connect to PEK1 nodes from the Mozilla VPN.