Re: [Openvpn-users] VPN working, but getting (WSAECONNRESET) (code=10054)

[Cameron Gocke <livedrive777@xxxxxxxxx>]

On 2/2/06, Don Boling <don.boling@xxxxxxxxx> wrote:
> On 2/2/06, Cameron Gocke <livedrive777@xxxxxxxxx> wrote:
> > I'm not really clear on exactly what this error is an indication of:
> >
> > read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
> >
> I am getting the same message. I believe mine is related to the ca.crt files ...
>
> I have 2 tunnels going... first
> I am running on XP in server mode on one end and it is the CA for my
> vpn... I have clients
> connecting to it just fine... ca.crt is the CA cert file for OpenSSL ...
>
> The new one is trying to connect(client mode) to another OVPN server
> on a Windows2000 server on the internet that I setup. It is using a
> different port number than the first AND when I created the CA on the
> Win2000 svr , I used a different filename for the CA on
> that one, so that I can have the different ca.crt files on my XP box
> without getting them
> confused. So now when I try to connect to the second OVPN on the
> Win2000 svr, I get this
> error as well. I believe it is because the TLS handshake is failing...
> maybe due to my different filenames for the ca.crt's
>
> I should point out that I used the easyrsa stuff to do this with.
>
> HTH,
> Don
>
> > In general our VPN is working fine, users login and get to all of the
> > resources on our network that the need to get to, but my logs are
> > scattered with these messages, sometimes 5-10 of them in a row.  Can
> > anyone tell me whether I should be troubleshooting this as an issue,
> > and if so what sort of issue is it likely to be to get me on the right
> > path?
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> > for problems?  Stop!  Download the new AJAX search engine that makes
> > searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> > _______________________________________________
> > Openvpn-users mailing list
> > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
> >
>

Interesting.  I am only using one set of crt files, but one
commonality I see is that I am running multiple instances of OpenVPN
(all in server mode) on my server.  Let me lay out my environment and
see if anyone thinks the way I have this setup might be causing these
errors:

I have two IP addresses bound to my actual network card.  This is done
so that I can bind the same ports for each instance of OpenVPN server
I am running.  Now I am running four instances of OpenVPN, two for
client to site connections, and two for site to site connections. 
Here is how they are configured:

S2S1 -> bound to 10.250.250.21 on TCP port 443
S2S2 -> bound to 10.250.250.21 on UDP port 443
C2S1 -> bound to 10.250.250.22 on TCP port 443
C2S2 -> bound to 10.250.250.22 on UDP port 443

All use the same certificates from the same directory locations,
etc...  Is there any reason this would cause these sort of errors?


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users