Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-11 Thread Jiri B 
On Sun, Sep 11, 2016 at 06:03:07PM +0900, Bryan Linton wrote:
> I'm seeing this too.  From reading this thread on bugs@, it looks
> like support for this was removed from the /sbin/route command (as
> well as the kernel itself) to enable upcoming support for other
> features.
> 
> Unfortunately, it doesn't look like support for having
> non-directly-connected static routes is planned to be re-added
> anytime soon, because it would interfere with the current efforts
> to move the network stack to a more SMP-friendly design.
> 
> http://marc.info/?l=openbsd-bugs=147291674529119=2
> 
> If anyone has any suggestions for a workaround, please enlighten
> me.  Unfortunately I don't have control over the server in my
> case, so changing the "topology subnet" to "topology p2p" as
> suggested previously in the thread isn't something I can do in my
> case.

Thanks for raising this info, you are right, it is route.c changed
which caused this issue.

I tried with an older OpenBSD box where it is working fine:

~~~
...
Sun Sep 11 11:29:58 2016 /sbin/route add -net 10.0.0.0 10.40.204.1 -netmask 
255.0.0.0
add net 10.0.0.0: gateway 10.40.204.1
Sun Sep 11 11:29:58 2016 GID set to _openvpn
Sun Sep 11 11:29:58 2016 UID set to _openvpn
Sun Sep 11 11:29:58 2016 Initialization Sequence Completed
^CSun Sep 11 11:30:13 2016 event_wait : Interrupted system call (code=4)
Sun Sep 11 11:30:13 2016 SIGTERM received, sending exit notification to peer
Sun Sep 11 11:30:16 2016 /sbin/route delete -net 10.0.0.0 10.40.204.1 -netmask 
255.0.0.0
route: must be root to alter routing table
Sun Sep 11 11:30:16 2016 ERROR: OpenBSD/NetBSD route delete command failed: 
external program exited with error status: 1
Sun Sep 11 11:30:16 2016 Closing TUN/TAP interface
Sun Sep 11 11:30:16 2016 PLUGIN_CALL: POST 
/usr/local/lib/openvpn/plugins/openvpn-plugin-down-root.so/PLUGIN_DOWN status=0
Sun Sep 11 11:30:16 2016 PLUGIN_CLOSE: 
/usr/local/lib/openvpn/plugins/openvpn-plugin-down-root.so
Sun Sep 11 11:30:16 2016 SIGTERM[soft,exit-with-notification] received, process 
exiting
# sysctl kern.version ; pkg_info openvpn | head -n1
kern.version=OpenBSD 6.0-current (GENERIC.MP) #2371: Fri Aug 19 09:18:22 MDT 
2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Information for inst:openvpn-2.3.11
~~~

j.

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-11 Thread Bryan Linton 
On 2016-09-10 21:29:29, Jiri B  wrote:
> 
> Thanks I do not see segfaults anymore but issue about 'too many symbolic 
> links'
> is strange. I doubt they have changed anything on remote OpenVPN gw.
> 

I'm seeing this too.  From reading this thread on bugs@, it looks
like support for this was removed from the /sbin/route command (as
well as the kernel itself) to enable upcoming support for other
features.

Unfortunately, it doesn't look like support for having
non-directly-connected static routes is planned to be re-added
anytime soon, because it would interfere with the current efforts
to move the network stack to a more SMP-friendly design.

http://marc.info/?l=openbsd-bugs=147291674529119=2

If anyone has any suggestions for a workaround, please enlighten
me.  Unfortunately I don't have control over the server in my
case, so changing the "topology subnet" to "topology p2p" as
suggested previously in the thread isn't something I can do in my
case.

-- 
Bryan

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-10 Thread Jiri B 
On Sat, Sep 10, 2016 at 05:35:01PM -0500, Brent Cook wrote:
> > ​Hi Jiri,
> >
> >  I just double-checked an OpenVPN setup using ​the latest snap + the
> > latest ports package, and it should no longer cause the segfault.
> >
> > OpenBSD 6.0-current (RAMDISK_CD) #2212: Sat Sep 10 10:03:50 MDT 2016
> >
> > The too many symbolic links issue seems to be related to the 'topology
> > subnet' configuration on the server. I was having a similar issue and
> > showed it to phessler in Cambridge. We found that OpenVPN seemed to be
> > adding a route that mirrored an existing one, which led to that somewhat
> > confusing error message. I'm not entirely sure how to resolve it, though
> > locally I switched back to p2p topology.
> >
> > ​ - Brent​

Thanks I do not see segfaults anymore but issue about 'too many symbolic links'
is strange. I doubt they have changed anything on remote OpenVPN gw.

He, '-d' in route is strange, not showing any useful info in this context:

~~~
# /sbin/route -dv add -net 10.0.0.0 10.40.204.1 -netmask 255.0.0.0   
so_dst: inet 10.0.0.0; so_gate: inet 10.40.204.1; so_mask: inet 255.0.0.0; 
RTM_ADD: Add Route: len 136, priority 0, table 0, ifidx 0, pid: 0, seq 1, errno 0
flags:
fmask:
use:0   mtu:0expire:0
locks:  inits:
sockaddrs: 
 10.0.0.0 10.40.204.1 255.0.0.0
add net 10.0.0.0: gateway 10.40.204.1

# /sbin/route -v add -net 10.0.0.0 10.40.204.1 -netmask 255.0.0.0 
so_dst: inet 10.0.0.0; so_gate: inet 10.40.204.1; so_mask: inet 255.0.0.0; 
RTM_ADD: Add Route: len 136, priority 0, table 0, ifidx 0, pid: 0, seq 1, errno 0
flags:
fmask:
use:0   mtu:0expire:0
locks:  inits:
sockaddrs: 
 10.0.0.0 10.40.204.1 255.0.0.0
add net 10.0.0.0: gateway 10.40.204.1: Too many levels of symbolic links

# netstat -rnf inet
Routing tables

Internet:
DestinationGatewayFlags   Refs  Use   Mtu  Prio Iface
default192.168.100.1  UGS5   40 - 8 em0
224/4  127.0.0.1  URS00 32768 8 lo0
10.40.204/22   10.40.204.16   UGS06 - 8 tun0
10.40.204.16   10.40.204.16   UHhl   11 - 1 tun0
10.40.204.16   10.40.204.16   UH 00 - 8 tun0
127/8  127.0.0.1  UGRS   00 32768 8 lo0
127.0.0.1  127.0.0.1  UHhl   3  757 32768 1 lo0
192.168.100/24 192.168.100.100UCn17 - 4 em0
192.168.100.1  00:25:90:60:8f:1e  UHLch  25 - 4 em0
192.168.100.10028:d2:44:df:a1:87  UHLl   0   98 - 1 em0
192.168.100.255192.168.100.100UHb02 - 1 em0
~~~

j.

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-10 Thread Brent Cook 
Gah, I'm of course not running from a ramdisk:

OpenBSD 6.0-current (GENERIC.MP) #2431: Sat Sep 10 09:58:36 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP

Please poke me (severely) if you are still seeing segfaults in OpenVPN with
this or later snaps.


On Sat, Sep 10, 2016 at 5:11 PM, Brent Cook  wrote:

>
> On Sat, Sep 10, 2016 at 3:07 PM, Jiri B  wrote:
>
>> On Fri, Sep 09, 2016 at 01:30:24PM +0200, Theo Buehler wrote:
>> > Recent changes to libcrypto were responsible for some fallout. The
>> > offending changes were backed out and this should be fixed with r1.35 of
>> > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/e
>> vp/evp_enc.c
>> >
>> > CVSROOT:  /cvs
>> > Module name:  src
>> > Changes by:   bc...@cvs.openbsd.org   2016/09/08 18:03:22
>> >
>> > Modified files:
>> >   lib/libcrypto/evp: evp_enc.c
>> >
>> > Log message:
>> > back out calls to EVP_CIPHER_CTX_cleanup() in
>> EVP_Cipher/Encrypt/DecryptFinal
>> >
>> > Software that refers to ctx after calling Final breaks with these
>> changes.
>> > revert parts of 1.31 and 1.32
>>
>> I updated to 'OpenBSD 6.0-current (GENERIC.MP) #2427: Fri Sep  9
>> 12:46:15 MDT 2016'
>> and rebuilt openvpn package and I have still the issue :/
>>
>> j.
>>
>>
> ​Hi Jiri,
>
>  I just double-checked an OpenVPN setup using ​the latest snap + the
> latest ports package, and it should no longer cause the segfault.
>
> OpenBSD 6.0-current (RAMDISK_CD) #2212: Sat Sep 10 10:03:50 MDT 2016
>
> The too many symbolic links issue seems to be related to the 'topology
> subnet' configuration on the server. I was having a similar issue and
> showed it to phessler in Cambridge. We found that OpenVPN seemed to be
> adding a route that mirrored an existing one, which led to that somewhat
> confusing error message. I'm not entirely sure how to resolve it, though
> locally I switched back to p2p topology.
>
> ​ - Brent​
>
>
>

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-10 Thread Brent Cook 
On Sat, Sep 10, 2016 at 3:07 PM, Jiri B  wrote:

> On Fri, Sep 09, 2016 at 01:30:24PM +0200, Theo Buehler wrote:
> > Recent changes to libcrypto were responsible for some fallout. The
> > offending changes were backed out and this should be fixed with r1.35 of
> > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/evp/evp_enc.c
> >
> > CVSROOT:  /cvs
> > Module name:  src
> > Changes by:   bc...@cvs.openbsd.org   2016/09/08 18:03:22
> >
> > Modified files:
> >   lib/libcrypto/evp: evp_enc.c
> >
> > Log message:
> > back out calls to EVP_CIPHER_CTX_cleanup() in
> EVP_Cipher/Encrypt/DecryptFinal
> >
> > Software that refers to ctx after calling Final breaks with these
> changes.
> > revert parts of 1.31 and 1.32
>
> I updated to 'OpenBSD 6.0-current (GENERIC.MP) #2427: Fri Sep  9 12:46:15
> MDT 2016'
> and rebuilt openvpn package and I have still the issue :/
>
> j.
>
>
​Hi Jiri,

 I just double-checked an OpenVPN setup using ​the latest snap + the latest
ports package, and it should no longer cause the segfault.

OpenBSD 6.0-current (RAMDISK_CD) #2212: Sat Sep 10 10:03:50 MDT 2016

The too many symbolic links issue seems to be related to the 'topology
subnet' configuration on the server. I was having a similar issue and
showed it to phessler in Cambridge. We found that OpenVPN seemed to be
adding a route that mirrored an existing one, which led to that somewhat
confusing error message. I'm not entirely sure how to resolve it, though
locally I switched back to p2p topology.

​ - Brent​

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-10 Thread Jiri B 
On Fri, Sep 09, 2016 at 01:30:24PM +0200, Theo Buehler wrote:
> Recent changes to libcrypto were responsible for some fallout. The
> offending changes were backed out and this should be fixed with r1.35 of
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/evp/evp_enc.c
> 
> CVSROOT:  /cvs
> Module name:  src
> Changes by:   bc...@cvs.openbsd.org   2016/09/08 18:03:22
> 
> Modified files:
>   lib/libcrypto/evp: evp_enc.c 
> 
> Log message:
> back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal
> 
> Software that refers to ctx after calling Final breaks with these changes.
> revert parts of 1.31 and 1.32

I updated to 'OpenBSD 6.0-current (GENERIC.MP) #2427: Fri Sep  9 12:46:15 MDT 
2016'
and rebuilt openvpn package and I have still the issue :/

j.

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-09 Thread Theo Buehler 
On Fri, Sep 09, 2016 at 04:17:37AM -0400, Jiri B wrote:
> Hi,
> 
> I use same openvpn config for long time but it seems recent updates (base, 
> packages)
> caused openvpn to segfault after a route add error.
> 
> Any help would be appreciated.
> 

Recent changes to libcrypto were responsible for some fallout. The
offending changes were backed out and this should be fixed with r1.35 of
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libcrypto/evp/evp_enc.c

CVSROOT:/cvs
Module name:src
Changes by: bc...@cvs.openbsd.org   2016/09/08 18:03:22

Modified files:
lib/libcrypto/evp: evp_enc.c 

Log message:
back out calls to EVP_CIPHER_CTX_cleanup() in EVP_Cipher/Encrypt/DecryptFinal

Software that refers to ctx after calling Final breaks with these changes.
revert parts of 1.31 and 1.32

Re: openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-09 Thread Jiri B 
~~~
#0  0x193e5bfa2973 in EVP_CIPHER_CTX_iv_length (ctx=0x193e57d3c800) at 
/usr/src/lib/libcrypto/evp/evp_lib.c:244
No locals.
#1  0x193c57809f58 in cipher_ctx_iv_length (ctx=0x193e57d3c800) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/crypto_openssl.c:606
No locals.
#2  0x193c57804fa6 in openvpn_encrypt (buf=0x7f7e26c0, work={capacity = 
1504, offset = 0, len = 0, data = 0x193ea7808000 ""}, opt=0x7f7e25e0, 
frame=0x7f7e2458) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/crypto.c:102
iv_buf = "\001\000\000\000\b\000\000\000��S��\233� "
iv_size = 6462
cipher_kt = (const cipher_kt_t *) 0x193ea78064f8
outlen = -1484758720
ctx = (struct key_ctx *) 0x193ea7806548
gc = {list = 0x0}
#3  0x193c5780e692 in encrypt_sign (c=0x7f7e1c20, comp_frag=true) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/forward.c:475
b = (struct context_buffers *) 0x193e8b961200
orig_buf = (const uint8_t *) 0x193ea780b800 ""
#4  0x193c5785840b in check_ping_send_dowork (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/ping.c:94
No locals.
#5  0x193c5780ee9d in check_ping_send (c=0x7f7e1c20) at ping-inline.h:56
No locals.
#6  0x193c5780e9f2 in process_coarse_timers (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/forward.c:565
No locals.
#7  0x193c5780eeec in check_coarse_timers_dowork (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/forward.c:574
save = {tv_sec = 604800, tv_usec = 0}
#8  0x193c578117b1 in check_coarse_timers (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/forward.c:589
local_now = 1473413910
#9  0x193c57811723 in pre_select (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/forward.c:1327
No locals.
#10 0x193c5783a644 in tunnel_point_to_point (c=0x7f7e1c20) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/openvpn.c:80
No locals.
#11 0x193c5783aa8b in openvpn_main (argc=3, argv=0x7f7e2938) at 
/home/jirib/openbsd/pobj/openvpn-2.3.11/openvpn-2.3.11/src/openvpn/openvpn.c:270
c = {options = {gc = {list = 0x193e71e75440}, gc_owned = true, config = 
0x7f7e2a49 "/etc/openvpn/ovpn-brq-udp-x86_64.conf", mode = 0, 
forward_compatible = false, ignore_unknown_option = 0x0, persist_config = 
false, persist_mode = 0, key_pass_file = 0x0, show_ciphers = false, 
show_digests = false, show_engines = false, show_tls_ciphers = false, genkey = 
false, ce = {proto = 1, local_port = 0, local_port_defined = false, remote_port 
= 443, local = 0x0, remote = 0x193e680499c8 "", remote_float = 
false, bind_defined = false, bind_local = false, connect_retry_seconds = 5, 
connect_retry_defined = false, connect_retry_max = 0, connect_timeout = 10, 
connect_timeout_defined = false, http_proxy_options = 0x0, socks_proxy_server = 
0x0, socks_proxy_port = 0, socks_proxy_authfile = 0x0, socks_proxy_retry = 
false, tun_mtu = 1360, tun_mtu_defined = true, tun_mtu_extra = 0, 
tun_mtu_extra_defined = false, link_mtu = 1500, link_mtu_defined = false, 
mtu_discover_type = -1, fragment = 0, mssfix = 1450, mssfix_default = false, 
explicit_exit_notification = 3, flags = 0}, remote_ip_hint = 0x0, 
connection_list = 0x0, remote_list = 0x193f07133808, force_connection_list = 
false, http_proxy_override = 0x0, rh_store = 0x0, remote_random = false, 
ipchange = 0x0, dev = 0x193f459ab1e8 "tun", dev_type = 0x0, dev_node = 0x0, 
lladdr = 0x0, topology = 3, ifconfig_local = 0x193ef49038c8 "10.40.204.156", 
ifconfig_remote_netmask = 0x193e71e75448 "255.255.252.0", ifconfig_ipv6_local = 
0x0, ifconfig_ipv6_netbits = 0, ifconfig_ipv6_remote = 0x0, ifconfig_noexec = 
false, ifconfig_nowarn = false, shaper = 0, proto_force = -1, mtu_test = false, 
mlock = false, keepalive_ping = 0, keepalive_timeout = 0, inactivity_timeout = 
0, inactivity_minimum_bytes = 0, ping_send_timeout = 30, ping_rec_timeout = 
600, ping_timer_remote = false, tun_ipv6 = false, ping_rec_timeout_action = 1, 
persist_tun = true, persist_local_ip = false, persist_remote_ip = false, 
persist_key = true, passtos = false, resolve_retry_seconds = 10, 
tuntap_options = {dummy = 0}, username = 0x193e68049be8 "_openvpn", groupname = 
0x193e68049c08 "_openvpn", chroot_dir = 0x0, cd_dir = 0x193edecc2ee8 
"/etc/openvpn", writepid = 0x0, up_script = 0x193e7cd25188 
"/etc/openvpn/ovpn-brq-udp-client.up", down_script = 0x0, user_script_used = 
true, down_pre = false, up_delay = false, up_restart = false, daemon = false, 
remap_sigusr1 = 0, inetd = 0, log = false, suppress_timestamps = false, nice = 
0, verbosity = 3, mute = 0, gremlin = 0, status_file = 0x193f08d54548 
"/tmp/ovpn-brq-upd.status", status_file_version = 3, status_file_update_freq = 
60,

openvpn-2.3.11 segfaults, error "Too many levels of symbolic links"

2016-09-09 Thread Jiri B 
Hi,

I use same openvpn config for long time but it seems recent updates (base, 
packages)
caused openvpn to segfault after a route add error.

Any help would be appreciated.

j.

openvpn-2.3.11
OpenBSD 6.0-current (GENERIC.MP) #2421: Mon Sep  5 07:50:28 MDT 2016

~~~
# openvpn --config /etc/openvpn/ovpn-brq-udp-x86_64.conf
Fri Sep  9 09:53:55 2016 OpenVPN 2.3.11 x86_64-unknown-openbsd6.0 [SSL 
(OpenSSL)] [LZO] [MH] [IPv6] built on Sep  3 2016
Fri Sep  9 09:53:55 2016 library versions: LibreSSL 2.5.0, LZO 2.09
Enter Auth Username:jbelka
Enter Auth Password:
Fri Sep  9 09:54:09 2016 WARNING: No server certificate verification method has 
been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Sep  9 09:54:09 2016 NOTE: the current --script-security setting may allow 
this configuration to call user-defined scripts
Fri Sep  9 09:54:09 2016 PLUGIN_INIT: POST 
/usr/local/lib/openvpn/plugins/openvpn-plugin-down-root.so 
'[/usr/local/lib/openvpn/plugins/openvpn-plugin-down-root.so] 
[/etc/openvpn/ovpn-brq-udp-client.down]' intercepted=PLUGIN_UP|PLUGIN_DOWN
Fri Sep  9 09:54:09 2016 WARNING: normally if you use --mssfix and/or 
--fragment, you should also set --tun-mtu 1500 (currently it is 1360)
Fri Sep  9 09:54:09 2016 Socket Buffers: R=[41600->41600] S=[9216->9216]
Fri Sep  9 09:54:09 2016 NOTE: UID/GID downgrade will be delayed because of 
--client, --pull, or --up-delay
Fri Sep  9 09:54:09 2016 UDPv4 link local: [undef]
Fri Sep  9 09:54:09 2016 UDPv4 link remote: [AF_INET]:443
Fri Sep  9 09:54:09 2016 TLS: Initial packet from [AF_INET]:443, 
sid=75faf7af 81d7f0cc
Fri Sep  9 09:54:13 2016 VERIFY OK: depth=1, C=US, ST=North Carolina, 
L=Raleigh, O=Example, Inc., OU=IS, CN=Example IS CA, 
emailAddress=sysadmin-...@example.com
Fri Sep  9 09:54:13 2016 VERIFY OK: depth=0, C=US, ST=North Carolina, 
O=Example, Inc., OU=Information Technology, CN=ovpn-brq.example.com, 
emailAddress=serviced...@example.com
Fri Sep  9 09:54:17 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized 
with 256 bit key
Fri Sep  9 09:54:17 2016 Data Channel Encrypt: Using 160 bit message hash 
'SHA1' for HMAC authentication
Fri Sep  9 09:54:17 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized 
with 256 bit key
Fri Sep  9 09:54:17 2016 Data Channel Decrypt: Using 160 bit message hash 
'SHA1' for HMAC authentication
Fri Sep  9 09:54:17 2016 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 
DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Sep  9 09:54:17 2016 [ovpn-brq.example.com] Peer Connection Initiated with 
[AF_INET]:443
Fri Sep  9 09:54:19 2016 SENT CONTROL [ovpn-brq.example.com]: 'PUSH_REQUEST' 
(status=1)
Fri Sep  9 09:54:19 2016 PUSH: Received control message: 
'PUSH_REPLY,route-gateway 10.40.204.1,route 10.0.0.0 255.0.0.0,dhcp-option DNS 
10.38.5.26,dhcp-option DNS 10.35.255.14,dhcp-option DOMAIN example.com,ping 
30,ping-exit 600,explicit-exit-notify 3,topology subnet,ifconfig 10.40.204.138 
255.255.252.0'
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: timers and/or timeouts modified
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: explicit notify parm(s) modified
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: --ifconfig/up options modified
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: route options modified
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: route-related options modified
Fri Sep  9 09:54:19 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option 
options modified
Fri Sep  9 09:54:19 2016 ROUTE_GATEWAY 192.168.100.1
Fri Sep  9 09:54:19 2016 TUN/TAP device /dev/tun0 opened
Fri Sep  9 09:54:19 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Sep  9 09:54:19 2016 /sbin/ifconfig tun0 10.40.204.138 10.40.204.138 mtu 
1360 netmask 255.255.252.0 up
Fri Sep  9 09:54:20 2016 /sbin/route add -net 10.40.204.0 10.40.204.138 
-netmask 255.255.252.0
add net 10.40.204.0: gateway 10.40.204.138
Fri Sep  9 09:54:20 2016 PLUGIN_CALL: POST 
/usr/local/lib/openvpn/plugins/openvpn-plugin-down-root.so/PLUGIN_UP status=0
Fri Sep  9 09:54:20 2016 /etc/openvpn/ovpn-brq-udp-client.up tun0 1360 1417 
10.40.204.138 255.255.252.0 init
OpenVPN run:
Opening socket /var/pdnsd/pdnsd.status
Succeeded
Fri Sep  9 09:54:20 2016 /sbin/route add -net 10.0.0.0 10.40.204.1 -netmask 
255.0.0.0
add net 10.0.0.0: gateway 10.40.204.1: Too many levels of symbolic links
Fri Sep  9 09:54:20 2016 ERROR: OpenBSD/NetBSD route add command failed: 
external program exited with error status: 1
Fri Sep  9 09:54:20 2016 GID set to _openvpn
Fri Sep  9 09:54:20 2016 UID set to _openvpn
Fri Sep  9 09:54:20 2016 Initialization Sequence Completed
Segmentation fault
~~~

dmesg

~~~
OpenBSD 6.0-current (GENERIC.MP) #2421: Mon Sep  5 07:50:28 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 12540866560 (11959MB)
avail mem = 12156301312 (11593MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xdcd3d000 (62 entries)
bios0: vendor LENOVO version "GJET79WW (2.29 )" date 09/03/2014