Package: openvpn
Version: 2.0.5-1
Severity: minor

Openvpn fails to bring up the tunnel if the system time goes backwards
during negotiation. As this is a very unusual situation, it's probably
not critical to fix this, therefore the minor severity.

I noticed this behaviour with a /etc/network/interfaces containing these
lines:

up /etc/init.d/openvpn start gondor
up ntpdate timeserver.rwth-aachen.de || true

This, in addition with a bad system time prior to the ifup, causes
openvpn to be started and ntpdate to be called shortly thereafter.
Ntpdate succeeds to update the system time through the native ethernet
interface (tunnel is not yet up). At that point, openvpn seems to stop
proceeding on the handshake procedure.

The time shift was 2h to the past - perhaps openvpn would continue after
waiting 2h, I was not patient enough to wait as long ;-)

Jan

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'testing'), (500, 
'stable'), (101, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-rc1-dirty
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]         1.4.72     Debian configuration management sy
ii  libc6                         2.3.6-4    GNU C Library: Shared libraries an
ii  liblzo1                       1.08-3     data compression library (old vers
ii  libssl0.9.8                   0.9.8a-8   SSL shared libraries

openvpn recommends no packages.

-- debconf information:
  openvpn/change_init: true
* openvpn/stop2upgrade: false
* openvpn/change_init2: true
  openvpn/create_tun: false
  openvpn/default_port:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to