Openconnect server crashes

buboleck · May 13, 2024, 8:47am

Hello,

I'm using Openconnect VPN server on my router (Linksys WRT1900ACS) and it works fine up to version 23.05.2.

With the new 23.05.3 and the snapshots it crashes:

Mon May 13 11:38:46 2024 daemon.info procd: Instance ocserv::instance1 s in a crash loop 6 crashes, 0 seconds since last crash

I also noticed that the package of Openconnect server is quite old, version 1.3. Is there any chance this package to be updated or fixed?

z1022 · May 22, 2024, 7:02am

Any sucess to run openconntect in 23.05.3 ?

Thanks

brada4 · May 22, 2024, 7:20am

What version?

github.com

openwrt/packages/blob/dbcbbb27eaf4ad460897bf70eb96ef8ace19d48a/net/openconnect/Makefile#L11


      
          #
          # Copyright (C) 2006-2015 OpenWrt.org
          #
          # This is free software, licensed under the GNU General Public License v2.
          # See /LICENSE for more information.
          #
          
          include $(TOPDIR)/rules.mk
          
          PKG_NAME:=openconnect
          PKG_VERSION:=9.12
          PKG_RELEASE:=4
          
          PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
          PKG_SOURCE_URL:=https://www.infradead.org/openconnect/download
          PKG_HASH:=a2bedce3aa4dfe75e36e407e48e8e8bc91d46def5335ac9564fbf91bd4b2413e
          
          PKG_LICENSE:=LGPL-2.1-or-later
          PKG_LICENSE_FILES:=COPYING.LGPL
          PKG_CPE_ID:=cpe:/a:infradead:openconnect

buboleck · May 22, 2024, 7:29am

Unfortunately no, even worse, the latest Ocserv 1.3 version from 15th of May broke on 23.05.2. I used very old 1.1.6-2 to revert that works. I haven't tried it on 23.05.03

brada4 · May 22, 2024, 7:34am

Do you use version installed via opkg? If it "crashes" there should be a line in dmesg about crash, or it is some ancient configuration combinations that just prevent ocserv (not openconnect) from starting?

buboleck · May 22, 2024, 7:37am

Yes, I use the version from opkg.I tried with fresh install and still the same. Maybe the luci-app-ocserv is breaking it?

brada4 · May 22, 2024, 7:42am

It is certainly a bug if doing trivial clicks you can break the service, try to gather as much bug evidence from the system and fill a bug report on github.
Seems you confirm v22 ocserv works

github.com

openwrt/packages/blob/openwrt-22.03/net/ocserv/Makefile

#
# Copyright (C) 2007-2011 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=ocserv
PKG_VERSION:=1.1.6
PKG_RELEASE:=2
PKG_USE_MIPS16:=0

PKG_BUILD_DIR :=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=ftp://ftp.infradead.org/pub/ocserv/
PKG_HASH:=6a6cbe92212e32280426a51c634adc3d4803579dd049cfdb7e014714cc82c693

PKG_LICENSE:=GPL-2.0-or-later

This file has been truncated. show original

while v23 is not well with luci-app

github.com

openwrt/packages/blob/openwrt-23.05/net/ocserv/Makefile

#
# Copyright (C) 2007-2011 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=ocserv
PKG_VERSION:=1.3.0
PKG_RELEASE:=1
PKG_BUILD_FLAGS:=no-mips16

PKG_BUILD_DIR :=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://www.infradead.org/ocserv/download/
PKG_HASH:=5c562c3ea1032065ef43d6075e5722f94ce6a7a780d6a2b4c6d54c1ce3921965

PKG_LICENSE:=GPL-2.0-or-later

This file has been truncated. show original

That yields luci-app at fault.

brada4 · May 22, 2024, 9:55pm

seems you reported where due.

github.com/openwrt/packages

ocserv 1.3 crashes and does not start

opened 02:42PM - 22 May 24 UTC

buboleck

Maintainer: @nmav Environment: (MVEBU, WRT1900ACSv1, OpenWrt 23.05.02, 23.05.03… etc) Description: Wed May 22 17:17:17 2024 daemon.err uhttpd[2071]: error connecting to ocserv socket '/var/run/occtl.socket': No such file or directory Wed May 22 17:17:19 2024 daemon.err uhttpd[2071]: error connecting to ocserv socket '/var/run/occtl.socket': No such file or directory Wed May 22 17:17:21 2024 daemon.err uhttpd[2071]: error connecting to ocserv socket '/var/run/occtl.socket': No such file or directory Wed May 22 17:17:35 2024 daemon.err uhttpd[2071]: error connecting to ocserv socket '/var/run/occtl.socket': No such file or directory Wed May 22 17:17:42 2024 daemon.err uhttpd[2071]: error connecting to ocserv socket '/var/run/occtl.socket': No such file or directory Wed May 22 17:18:00 2024 daemon.info procd: Instance ocserv::instance1 s in a crash loop 6 crashes, 0 seconds since last crash The crash is reproducible with the following combinations: OpenWrt 23.05.02/Ocserv 1.3/luci-app-ocserv git-20.110.55046-74da73b OpenWrt 23.05.03/Ocserv 1.3/luci-app-ocserv git-20.110.55046-74da73b OpenWrt SNAPSHOT r26300 (Linux 6.6.30)/Ocserv 1.3/luci-app-ocserv 23.267.29502~3e7fe9f Working combinations for me are OpenWrt 23.05.02/Ocserv 1.1.x/1.2.x/luci-app-ocserv git-20.110.55046-74da73b OpenWrt SNAPSHOT r26300 (Linux 6.6.30)/Ocserv 1.1.6-2/luci-app-ocserv 23.267.29502~3e7fe9f The 1.1.6-2 I got from older build as 1.2.x was replaced by 1.3. I also tried on fresh install without transferring configs but Ocserv 1.3 still crashes. OpenWrt version information from system /etc/openwrt_release DISTRIB_ID='OpenWrt' DISTRIB_RELEASE='23.05.2' DISTRIB_REVISION='r23630-842932a63d' DISTRIB_TARGET='mvebu/cortexa9' DISTRIB_ARCH='arm_cortex-a9_vfpv3-d16' DISTRIB_DESCRIPTION='OpenWrt 23.05.2 r23630-842932a63d' DISTRIB_TAINTS='' DISTRIB_ID='OpenWrt' DISTRIB_RELEASE='SNAPSHOT' DISTRIB_REVISION='r26300-da0cd9d764' DISTRIB_TARGET='mvebu/cortexa9' DISTRIB_ARCH='arm_cortex-a9_vfpv3-d16' DISTRIB_DESCRIPTION='OpenWrt SNAPSHOT r26300-da0cd9d764' DISTRIB_TAINTS='' Please let me know what other info I can provide.

enclose log fragments in 3 backticks ```

buboleck · May 27, 2024, 1:36pm

Hello,

You can edit the init script as in the commit:

system · June 6, 2024, 1:37pm

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.