Tips for Solving Fixed License Key Issues⁠

Connection problems: Ensure access to licensing.openvpn.net or licserv.openvpn.net on port TCP 443.

Hardware changes: If your server's hardware or software has changed significantly, the licensing system may invalidate the license key.

Memory issues: Out-of-memory conditions can disrupt the licensing system. Reboot the server to rule this out.

If DNS resolution fails, try editing /etc/resolv.conf and set DNS servers manually (e.g., Google’s DNS: 8.8.8.8).

If you’re behind a firewall, manually specify the licensing server IP by editing /etc/hosts:

54.183.149.72 licserv.openvpn.net licensing.openvpn.net

Check the license manager tool for details:

/usr/local/openvpn_as/scripts/liman info

• Sample output:

  Manager: exception with license file /usr/local/openvpn_as/etc/licenses/ABCD-1234-EFGH-5678.lic:
   machine properties validation failed: verify fail: ABCD-1234-EFGH-5678
   [3:0:8]/mac=110/hd=000/cpu=110/pci=110/ino=110/iid=000 (LIC_VPROP)
  Manager: exception with license file /usr/local/openvpn_as/etc/licenses/IJKL-0912-MNOP-3456.lic:
   license key ID is expired (LIC_KEY_EXP)
  Manager: exception with license file /usr/local/openvpn_as/etc/licenses/QRST-7890-UVWX-1234.lic:
   signature verification failed (LIC_VERIFY)
  INFO {'apc': False, 'concurrent_connections': 20}

Verify the license key files present on your system:

ls -la /usr/local/openvpn_as/etc/licenses/

Machine properties validation failed: Contact support if your license key hasn't expired and this message displays. We'll revoke the current key and issue a replacement.

Signature verification failed: This message displays if the license file becomes corrupt, which can occur on a damaged file system or when the file is manually transferred. Avoid copying and pasting the contents of a file when doing an offline activation. Instead, use SCP or WinSCP.

Fault 9000: "twisted.internet.error.DNSLookupError: DNS lookup failed: address 'licensing.openvpn.net' not found: [Errno -2] Name or service not known.": This occurs when there's a DNS issue.

SESSION ERROR: SESSION: Your session has expired, please reauthenticate (9007): This occurs when there's a DNS or internet access issue.

<Fault 9000: "OpenSSL.SSL.Error: [('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')]">: This occurs when the secure connection between your Access Server and our licensing server fails. A proxy system or firewall could cause this error when it intercepts traffic and presents its own SSL certificate. Another possibility is incorrect time and date on your Access Server.

• To fix the date time:

  Check the current date setting:

  timedatectl

  Change the timezone:

  dpkg-reconfigure tzdata

  Correct the date or time:

  date --set="24 JAN 2024 20:10:00"

  If you don't have a network time protocol client, install one:

  apt-get update
  apt-get install ntp

Unable to get local issuer certificate: This occurs when a firewall or proxy blocks access.

• Determine access:

  wget -O- -q --no-check-certificate https://licensing.openvpn.net/ | grep "XML_PARSE"

  If you don't see the expected output (<value><string>XML_PARSE: error parsing XML</string></value>, run this command:

  wget -O- --no-check-certificate https://licensing.openvpn.net/

  If the output returns HTML code starting with <HTML><HEAD>, this comes from a webpage not generated by our licensing system but by a system in between.

Fault 9000: twisted.internet.error.TimeoutError: User timeout caused connection failure: This occurs when your Access Server installation can't reach the internet for online activation.

• Ensure internet access and that DNS settings are correct.

• Verify you can ping and reach internet addresses from the command line.

• Check any firewalls or security groups for blocked access.

• If your system can't be connected to the internet, request or perform an offline activation.

• In rare cases, this error occurs when a fixed license was previously activated.