OpenVPN / OpenVPN/openvpn

OpenVPN restarting after segfault error

Open
#1,067 15 comments 0 reactions 2 assignees View on GitHub

@ordex is already working on this.

Since Jun 28, 2026.

DCO linux
Dominant language
C
Stars
14.6k
Forks
3.4k
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
OpenVPN restarting after segfault error

To Reproduce
Unknown

Expected behavior
No error

Version information (please complete the following information):

  • OS: Ubuntu 24.04 HWE
  • OpenVPN version: OpenVPN 2.7.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [COMP_STUB] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
    library versions: OpenSSL 3.0.13 30 Jan 2024
    DCO version: 6.17.0-35-generic #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 19:30:42 UTC 2

Additional context
journalctl log:
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_VER=3.11.1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_PLAT=ios
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_NCP=2
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_TCPNL=1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_PROTO=8094
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_MTU=1600
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_CIPHERS=AES-128-CBC:AES-192-CBC:AES-256-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_AUTO_SESS=1
openvpn[607]: udp4:80.253.14.47:1508 peer info: IV_SSO=webauth,crtext
openvpn[607]: udp4:80.253.14.47:1508 [user-123] Peer Connection Initiated with [AF_INET]80.253.14.47:1508
openvpn[607]: ovpn_handle_peer: received data for a non-existing peer 80
kernel: vpn-udp: deleting peer with id 178, reason 2
kernel: vpn-udp: deleting peer with id 80, reason 1
kernel: openvpn[607]: segfault at 55f3744d54b2 ip 000055f61ac8ea7a sp 00007fff1a213010 error 4 in openvpn[46a7a,55f61ac53000+8a000] likely on CPU 0 (core 0, socket 0)
kernel: Code: 7f 18 48 89 c6 48 89 44 24 08 e8 21 b2 fe ff 48 8b 7c 24 08 e8 e7 b2 fe ff 48 85 c0 0f 84 bb 00 00 00 4c 8b 00 4c 39 c3 74 e5 <41> 80 78 50 00 75 de 49 8b b8 58 11 00 00 be 01 00 00 00 4c 89 44

kernel: vpn-udp: deleting peer with id 38, reason 4
kernel: vpn-udp: deleting peer with id 83, reason 4
kernel: vpn-udp: deleting peer with id 86, reason 4
kernel: vpn-udp: deleting peer with id 125, reason 4
kernel: vpn-udp: deleting peer with id 102, reason 4
kernel: vpn-udp: deleting peer with id 4, reason 4
kernel: vpn-udp: deleting peer with id 13, reason 4
kernel: vpn-udp: deleting peer with id 60, reason 4
kernel: vpn-udp: deleting peer with id 43, reason 4
kernel: vpn-udp: deleting peer with id 134, reason 4
kernel: vpn-udp: deleting peer with id 75, reason 4
kernel: vpn-udp: deleting peer with id 137, reason 4
kernel: vpn-udp: deleting peer with id 81, reason 4
kernel: vpn-udp: deleting peer with id 169, reason 4
kernel: vpn-udp: deleting peer with id 62, reason 4
kernel: vpn-udp: deleting peer with id 168, reason 4
kernel: vpn-udp: deleting peer with id 100, reason 4
kernel: vpn-udp: deleting peer with id 87, reason 4
.....
systemd[1]: openvpn-server@vpn-udp.service: Scheduled restart job, restart counter is at 1.
systemd[1]: Starting openvpn-server@vpn-udp.service - OpenVPN service for vpn-udp...
openvpn[1805429]: OpenVPN 2.7.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [COMP_STUB] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
openvpn[1805429]: library versions: OpenSSL 3.0.13 30 Jan 2024
openvpn[1805429]: DCO version: 6.17.0-35-generic #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 19:30:42 UTC 2
systemd[1]: Started openvpn-server@vpn-udp.service - OpenVPN service for vpn-udp.
openvpn[1805429]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
openvpn[1805429]: CRL: loaded 1 CRLs from file keys/crl.pem
openvpn[1805429]: sitnl_send: rtnl: generic error (-17): File exists
openvpn[1805429]: DCO device vpn-udp already exists, won't be destroyed at shutdown
openvpn[1805429]: ovpn-dco device [vpn-udp] opened
openvpn[1805429]: net_iface_mtu_set: mtu 1420 for vpn-udp
openvpn[1805429]: net_iface_up: set vpn-udp up
openvpn[1805429]: net_addr_v4_add: 10.29.0.1/22 dev vpn-udp
openvpn[1805429]: UDPv4 link local (bound): [AF_INET][undef]:50443
openvpn[1805429]: UDPv4 link remote: [AF_UNSPEC]
openvpn[1805429]: UID set to nobody
openvpn[1805429]: Capabilities retained: CAP_NET_ADMIN
openvpn[1805429]: Initialization Sequence Completed

conf:
cd /etc/openvpn/server
mode server
proto udp4
port 50443
dev-type tun
dev vpn-udp
topology subnet
server 10.29.0.0 255.255.252.0
push "dhcp-option DNS 10.29.0.1"
push "block-outside-dns"
cipher AES-128-GCM
keepalive 15 30
persist-tun
float
user nobody
#duplicate-cn
#verb 4
#log logs/vpn-udp.log
status logs/vpn-udp-status.log 30
client-config-dir ccd
ca keys/ca.crt
cert keys/vpn-server.crt
key keys/vpn-server.key
crl-verify keys/crl.pem
dh none
tls-groups "X25519:prime256v1"
reneg-sec 0
inactive 86400
hand-window 10
tun-mtu 1420
mssfix 0
block-ipv6
script-security 2
client-connect scripts/client-connect.sh
client-disconnect scripts/client-disconnect.sh
management /run/openvpn-server/vpn-udp.sock unix
data-ciphers "AES-128-GCM:AES-256-GCM:CHACHA20-POLY1305"

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.