[Solved] Openvpn fails wih "Assertion failed at socket.c:460"

aik · December 16, 2024, 10:44am

I have 5+ year old openvpn config (so there may be strange option choices ) which still works on ubuntu16, below. Now I am porting it to openwrt 23.05.5 (r24106-10cc5fcd00), took me a while to reenter everything using the gui, and this is the result which is very much same as the original, except it does not work: Assertion failed at socket.c:460 appears in the kernel log. OpenVPN 2.5.8 so it is this:

github.com

OpenVPN/openvpn/blob/v2.5.8/src/openvpn/socket.c#L460


      
          struct addrinfo hints;
          int status;
          int sigrec = 0;
          int msglevel = (flags & GETADDR_FATAL) ? M_FATAL : D_RESOLVE_ERRORS;
          struct gc_arena gc = gc_new();
          const char *print_hostname;
          const char *print_servname;
          
          ASSERT(res);
          
          ASSERT(hostname || servname);
          ASSERT(!(flags & GETADDR_HOST_ORDER));
          
          if (servname)
          {
              print_servname = servname;
          }
          else
          {
              print_servname = "";
          }

Which hardly makes sense as remote points to a valid server which I can ping from the openwrt router, so it resolves. What is missing?

root@OpenWrt:~# cat /var/etc/openvpn-xxxxx.conf 
client
nobind
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpnclient1.crt
cipher AES-256-GCM
comp-lzo yes
dev tun
dh /etc/openvpn/dh2048.pem
key /etc/openvpn/vpnclient1.key
port 1194
proto tcp-server
remote zzzzzz.xxx
remote-cert-tls server
verb 3

egc · December 16, 2024, 10:51am

Try proto tcp-client

Furthermore compression is also deprecated and not much used any more

cipher is also deprecated we now have data-ciphers

aik · December 16, 2024, 11:05am

proto tcp-client works, thanks! How did you figure it? The old openvpn just had 2 options (tcp and udp), hence the confusion.

egc · December 16, 2024, 11:52am

For client it is tcp-client for the server side you use tcp-server

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks!

system · December 26, 2024, 11:52am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.