<div dir="ltr">ok, ho fatto la modifica su entrambi i router file /etc/openvpn ho causato una mancanza di rotte riavviandoli in un modo temporizzato la vpn si connette alla disponibilità di internet e della risoluzione del nome..<div><br></div><div>i log: </div><div><br></div><div><div>Tue Feb 7 12:34:39 2017 OpenVPN 2.3.6 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jan 19 2017</div><div>Tue Feb 7 12:34:39 2017 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.08</div><div>Tue Feb 7 12:34:39 2017 ******* WARNING *******: null cipher specified, no encryption will be used</div><div>Tue Feb 7 12:34:39 2017 Socket Buffers: R=[163840->131072] S=[163840->131072]</div><div>Tue Feb 7 12:34:39 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:34:39 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:34:44 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:34:49 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:34:54 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:34:59 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:35:04 2017 RESOLVE: Cannot resolve host address: <a href="http://controller.basilicata.ninux.org">controller.basilicata.ninux.org</a>: Name or service not known</div><div>Tue Feb 7 12:35:09 2017 UDPv4 link local: [undef]</div><div>Tue Feb 7 12:35:09 2017 UDPv4 link remote: [AF_INET]<a href="http://176.9.187.220:1194">176.9.187.220:1194</a></div><div>Tue Feb 7 12:35:09 2017 TLS: Initial packet from [AF_INET]<a href="http://176.9.187.220:1194">176.9.187.220:1194</a>, sid=6c23f967 177a48b1</div><div>Tue Feb 7 12:35:09 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this</div><div>Tue Feb 7 12:35:10 2017 VERIFY OK: depth=1, C=IT, ST=MT, L=Matera, O=Ninux Basilicata, OU=MyOrganizationalUnit, CN=Ninux Basilicata CA, name=EasyRSA, emailAddress=<a href="mailto:basilicata@ml.ninux.org">basilicata@ml.ninux.org</a></div><div>Tue Feb 7 12:35:10 2017 VERIFY OK: nsCertType=SERVER</div><div>Tue Feb 7 12:35:10 2017 VERIFY OK: depth=0, C=IT, ST=MT, L=Matera, O=Ninux Basilicata, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=<a href="mailto:basilicata@ml.ninux.org">basilicata@ml.ninux.org</a></div><div>Tue Feb 7 12:35:12 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication</div><div>Tue Feb 7 12:35:12 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication</div><div>Tue Feb 7 12:35:12 2017 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA</div><div>Tue Feb 7 12:35:12 2017 [server] Peer Connection Initiated with [AF_INET]<a href="http://176.9.187.220:1194">176.9.187.220:1194</a></div><div>Tue Feb 7 12:35:14 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)</div><div>Tue Feb 7 12:35:14 2017 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.27.253.1,ping 5,ping-restart 60,ifconfig 10.27.253.16 255.255.255.0'</div><div>Tue Feb 7 12:35:14 2017 OPTIONS IMPORT: timers and/or timeouts modified</div><div>Tue Feb 7 12:35:14 2017 OPTIONS IMPORT: --ifconfig/up options modified</div><div>Tue Feb 7 12:35:14 2017 OPTIONS IMPORT: route-related options modified</div><div>Tue Feb 7 12:35:14 2017 TUN/TAP device vpnbas opened</div><div>Tue Feb 7 12:35:14 2017 TUN/TAP TX queue length set to 100</div><div>Tue Feb 7 12:35:14 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0</div><div>Tue Feb 7 12:35:14 2017 /sbin/ifconfig vpnbas 10.27.253.16 netmask 255.255.255.0 mtu 1500 broadcast 10.27.253.255</div><div>Tue Feb 7 12:35:14 2017 Initialization Sequence Completed</div><div>Tue Feb 7 12:36:20 2017 write UDPv4: Network is unreachable (code=128)</div><div>Tue Feb 7 12:36:25 2017 write UDPv4: Network is unreachable (code=128)</div><div><br></div><div class="gmail_extra"><br><div class="gmail_quote">Il giorno 7 febbraio 2017 12:29, Claudio <span dir="ltr"><<a href="mailto:claud43@gmail.com" target="_blank">claud43@gmail.com</a>></span> ha scritto:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">i test in produzione servono a questo ;) <div><br></div><div>ok, provo subito a fare la modifica che hai scritto </div><span class="gmail-"><div><br></div><div><br><div class="gmail_extra"><br><div class="gmail_quote">Il giorno 7 febbraio 2017 12:24, Nemesis <span dir="ltr"><<a href="mailto:nemesis@ninux.org" target="_blank">nemesis@ninux.org</a>></span> ha scritto:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Grande claudio, hai trovato un bug in uno dei componenti di openwisp2.<br>
<br>
Quello che ti dicevo è corretto (chi è curioso può vedere<br>
"connect-retry", "ping-restart" e "resolv_retry" su<br>
<a href="https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage" rel="noreferrer" target="_blank">https://community.openvpn.net/<wbr>openvpn/wiki/Openvpn23ManPage</a>)<wbr>, di default<br>
openvpn prova a ristabilire il tunnel periodicamente, ma c'è un bug<br>
sulla libreria che genera le configurazioni, che invece di generare:<br>
<br>
option resolv_retry 'infinite'<br>
<br>
genera:<br>
<br>
option resolv_retry '1'<br>
<br>
Quindi invece di provare a risolvere l'hostname all'infinito, dopo solo<br>
1 secondo di ritentativo si arrende e termina il processo.<br>
<br>
Ho aperto un issue su github su cui proverò ad intervenire il prima<br>
possibile: <a href="https://github.com/openwisp/netjsonconfig/issues/60" rel="noreferrer" target="_blank">https://github.com/openwisp/ne<wbr>tjsonconfig/issues/60</a><br>
<br>
Nel frattempo però mi sarebbe molto di aiuto se tu potessi provare<br>
manualmente a modificare:<br>
<br>
/etc/config/openvpn<br>
<br>
correggendo la riga:<br>
<br>
option resolv_retry '1'<br>
<br>
con:<br>
<br>
option resolv_retry 'infinite'<br>
<br>
Ed effettuando un nuovo test.<br>
<br>
Nemesis<br>
<span><br>
<br></span></blockquote></div></div></div></span></div>
</blockquote></div><br></div></div></div>