Package: openvpn
Version: 2.4.0-3
Severity: normal

Dear Maintainer,

I was trying to start/control an OpenVPN tunnel through NetworkManager, and I
ran into the following failure:

Feb 11 15:31:30 bolt NetworkManager[1125]: <info>  [1486848690.8671] device 
(tun0): state change: unmanaged -> unavailable (reason 'connection-assumed') 
[10 20 41]
Feb 11 15:31:30 bolt nm-openvpn[3510]: TCP/UDP: Preserving recently used remote 
address: [AF_INET6]2604:180:0:244::3:1194
Feb 11 15:31:30 bolt nm-openvpn[3510]: UDP link local: (not bound)
Feb 11 15:31:30 bolt nm-openvpn[3510]: UDP link remote: 
[AF_INET6]2604:180:0:244::3:1194
Feb 11 15:31:30 bolt nm-openvpn[3510]: chroot to '/var/lib/openvpn/chroot' and 
cd to '/' succeeded
Feb 11 15:31:30 bolt nm-openvpn[3510]: GID set to nm-openvpn
Feb 11 15:31:30 bolt nm-openvpn[3510]: UID set to nm-openvpn
Feb 11 15:31:30 bolt nm-openvpn[3510]: OpenSSL: error:24064064:random number 
generator:SSLEAY_RAND_BYTES:PRNG not seeded
Feb 11 15:31:30 bolt nm-openvpn[3510]: RAND_bytes() failed
Feb 11 15:31:30 bolt nm-openvpn[3510]: Assertion failed at crypto.c:1780 
(rand_bytes(output, len))
Feb 11 15:31:30 bolt nm-openvpn[3510]: Exiting due to fatal error
Feb 11 15:31:30 bolt NetworkManager[1125]: <error> [1486848690.8778] 
platform-linux: do-add-ip4-route[5: 0.0.0.0/0 50]: failure 19 (Kein passendes 
Gerät gefunden)
Feb 11 15:31:30 bolt NetworkManager[1125]: <warn>  [1486848690.8779] 
default-route: failed to add default route 0.0.0.0/0 via 0.0.0.0 dev 5 metric 
50 mss 0 src vpn with effective metric 50

Creating device nodes /var/lib/openvpn/chroot/dev/{u,}random fixed this problem.

Thanks!
Andreas


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'), 
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.60
ii  init-system-helpers    1.47
ii  iproute2               4.9.0-1
ii  libc6                  2.24-9
ii  liblz4-1               0.0~r131-2
ii  liblzo2-2              2.08-1.2
ii  libpam0g               1.1.8-3.5
ii  libpkcs11-helper1      1.21-1
ii  libssl1.0.2            1.0.2k-1
ii  libsystemd0            232-15
ii  lsb-base               9.20161125

Versions of packages openvpn recommends:
pn  easy-rsa  <none>

Versions of packages openvpn suggests:
ii  openssl     1.1.0c-2
pn  resolvconf  <none>

-- Configuration Files:
/etc/default/openvpn changed [not included]

-- debconf information:
  openvpn/create_tun: false

Reply via email to