[Openvpn-users] OpenVPN with Padlock Engine

["Terdisch, Andreas" <ATerdisch@xxxxxxxxxx>]

Hi,

I am attempting to setup an Openvpn server with VIA's Padlock Engine.
When I set engine padlock in my server.conf, the clients can't connect
and
I get the following Error.

Thanks for any help.


Dec  9 12:23:22 srv1 ovpn-server[2017]: OpenVPN 2.0.9 i486-pc-linux-gnu
[SSL] [LZO] [EPOLL] built on Oct 10 2006
Dec  9 12:23:22 srv1 ovpn-server[2017]: Initializing OpenSSL support for
engine 'padlock'
Dec  9 12:23:22 srv1 ovpn-server[2017]: Diffie-Hellman initialized with
1024 bit key
Dec  9 12:23:22 srv1 ovpn-server[2017]: TLS-Auth MTU parms [ L:1557
D:138 EF:38 EB:0 ET:0 EL:0 ]
Dec  9 12:23:22 srv1 ovpn-server[2017]: TUN/TAP device tun0 opened
Dec  9 12:23:22 srv1 ovpn-server[2017]: TUN/TAP TX queue length set to
100
Dec  9 12:23:22 srv1 ovpn-server[2017]: /sbin/ifconfig tun0 10.9.0.1
pointopoint 10.9.0.2 mtu 1500
Dec  9 12:23:22 srv1 ovpn-server[2017]: /sbin/route add -net 10.9.0.0
netmask 255.255.255.0 gw 10.9.0.2
Dec  9 12:23:22 srv1 ovpn-server[2017]: Data Channel MTU parms [ L:1557
D:1450 EF:57 EB:4 ET:0 EL:0 ]
Dec  9 12:23:22 srv1 ovpn-server[2021]: Socket Buffers:
R=[107520->131072] S=[107520->131072]
Dec  9 12:23:22 srv1 ovpn-server[2021]: UDPv4 link local (bound):
[undef]:1194
Dec  9 12:23:22 srv1 ovpn-server[2021]: UDPv4 link remote: [undef]
Dec  9 12:23:22 srv1 ovpn-server[2021]: MULTI: multi_init called, r=256
v=256
Dec  9 12:23:22 srv1 ovpn-server[2021]: IFCONFIG POOL: base=10.9.0.4
size=62
Dec  9 12:23:22 srv1 ovpn-server[2021]: IFCONFIG POOL LIST
Dec  9 12:23:22 srv1 ovpn-server[2021]: client3,10.9.0.4
Dec  9 12:23:22 srv1 ovpn-server[2021]: Initialization Sequence
Completed
Dec  9 12:23:28 srv1 ovpn-server[2021]: MULTI: multi_create_instance
called
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Re-using SSL/TLS
context
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Control Channel
MTU parms [ L:1557 D:138 EF:38 EB:0 ET:0 EL:0 ]
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Data Channel MTU
parms [ L:1557 D:1450 EF:57 EB:4 ET:0 EL:0 ]
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Local Options
String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher
AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Expected Remote
Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto
UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Local Options hash
(VER=V4): '8114d01c'
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 Expected Remote
Options hash (VER=V4): '2dd3fcaf'
Dec  9 12:23:28 srv1 ovpn-server[2021]: 10.0.0.6:1030 TLS: Initial
packet from 10.0.0.6:1030, sid=5c77c13e 0328ad21
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030 VERIFY OK:
depth=1,
/C=DE/ST=NRW/L=Neukirchen-Vluyn/O=CashKit_GmbH/OU=VPN/CN=CashKit_GmbH_CA
/emailAddress=info@xxxxxxxxxx
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030 VERIFY OK:
depth=0,
/C=DE/ST=NRW/L=Neukirchen-Vluyn/O=CashKit_GmbH/OU=VPN/CN=client3/emailAd
dress=info@xxxxxxxxxx
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030 TLS_ERROR: BIO
read tls_read_plaintext error: error:1408F119:SSL
routines:SSL3_GET_RECORD:decryption failed or bad record mac
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030 TLS Error: TLS
object -> incoming plaintext read error
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030 TLS Error: TLS
handshake failed
Dec  9 12:23:29 srv1 ovpn-server[2021]: 10.0.0.6:1030
SIGUSR1[soft,tls-error] received, client-instance restarting
Dec  9 12:24:12 srv1 ovpn-server[2021]: event_wait : Interrupted system
call (code=4)
Dec  9 12:24:12 srv1 ovpn-server[2021]: TCP/UDP: Closing socket
Dec  9 12:24:12 srv1 ovpn-server[2021]: /sbin/route del -net 10.9.0.0
netmask 255.255.255.0
Dec  9 12:24:12 srv1 ovpn-server[2021]: Closing TUN/TAP interface
Dec  9 12:24:12 srv1 ovpn-server[2021]: SIGTERM[hard,] received, process
exiting


--------cpuinfo--------
processor	: 0
vendor_id	: CentaurHauls
cpu family	: 6
model		: 9
model name	: VIA Nehemiah
stepping	: 8
cpu MHz	: 998.742
cache size	: 64 KB
fdiv_bug	: no
hlt_bug	: no
f00f_bug	: no
coma_bug	: no
fpu		: yes
fpu_exception	: yes
cpuid level	: 1
wp		: yes
flags		: fpu vme de pse tsc msr cx8 sep mtrr pge cmov pat mmx
fxsr sse up rng rng_en ace ace_en
bogomips	: 2000.31

--------server.conf----
port 1194
proto udp
dev tun
dev-node /dev/tun
ca ca.crt
cert srv2.crt
key srv2.key  # This file should be kept secret
dh dh1024.pem
server 10.9.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 0.0.0.0 0.0.0.0"
client-config-dir ccd
client-connect ./connect
client-disconnect ./disconnect
learn-address ./learn
keepalive 10 30
cipher AES-256-CBC   # AES
persist-key
status openvpn-status.log
verb 4
engine padlock



______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users