Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)

  • État Nouveau
  • Pourcentage achevé
    0%
  • Type Anomalie
  • Catégorie Services locaux → Client VPN
  • Assignée à Personne
  • Système d'exploitation Freebox Server V6 (Révolution)
  • Sévérité Haute
  • Priorité Très Basse
  • Basée sur la version 4.7.8
  • Due pour la version Non décidée
  • Échéance Non décidée
  • Votes 1
  • Privée

FS#38589 - Client VPN avec serveur IPVANISH --> erreur d'authentification

Bonjour à tous,

Depuis plusieurs semaines ma Freebox Server n’arrive plus à se connecter aux serveurs de chez IPVANISH par protocole OPENVPN. Je trouve le message d’erreur

openvpn: username/password incorrect

J’ai vérifié tout ce que je pouvais, à savoir :

  • fichier de configuration fourni par IPVANISH, que j’ai mis à jour avec les dernières versions ;
  • login et mot de passe.

J’ai écumé les forums sans trouver de réponse.
Le problème semble similaire à celui décrit par les clients de NordVPN (voir ici : https://dev.freebox.fr/bugs/task/38479) à la différence que la solution ne se trouve pas du côté de IPVANISH.
J’ai passé pas mal de temps à discuter avec le support technique de chez IPVANISH pour arriver à la conclusion que le problème doit être du côté de Free.

Je demande donc de l’aide ici !

Voici ma configuration : Freebox Server Revolution / OS 4.7.8

Voici la copie du log lors d’une tentative de connexion du client VPN :

2023-08-06 08:56:11 openvpn: output: 2023-08-06 08:56:11 MANAGEMENT: >STATE:1691304971,EXITING,auth-failure,,,,,
2023-08-06 08:56:11 openvpn: openvpn process died (0)
2023-08-06 08:56:11 l3 state change 'l3_wait_postdown_helper' => 'l3_cleanup_finish'
2023-08-06 08:56:11 l3 state change 'l3_cleanup_finish' => 'l3_finished'
2023-08-06 08:56:11 state change 'wait_l3_up' => 'wait_l3_down'
2023-08-06 08:56:11 l3 state change 'l3_finished' => 'l3_down'
2023-08-06 08:56:11 state is now DOWN
2023-08-06 08:56:11 state change 'wait_l3_down' => 'l3_finished'
2023-08-06 08:56:11 state change 'l3_finished' => 'wait_l2_down'
2023-08-06 08:56:11 l2 state change 'l2_up' => 'l2_cleanup'
2023-08-06 08:56:11 l2 state change 'l2_cleanup' => 'l2_down'
2023-08-06 08:56:11 state change 'wait_l2_down' => 'down'
2023-08-06 08:56:16 state change 'down' => 'wait_l2_up'
2023-08-06 08:56:16 l2 state change 'l2_down' => 'l2_up'
2023-08-06 08:56:16 state change 'wait_l2_up' => 'l2_up'
2023-08-06 08:56:16 state change 'l2_up' => 'wait_l3_up'
2023-08-06 08:56:16 l3 state change 'l3_down' => 'l3_start'
2023-08-06 08:56:16 starting
2023-08-06 08:56:16 calling helper script at '/etc/fbxconnman/conn.pre-up'
2023-08-06 08:56:16 l3 state change 'l3_start' => 'l3_wait_preup_helper'
2023-08-06 08:56:16 l3 state change 'l3_wait_preup_helper' => 'l3_wait_stable'
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 OpenVPN 2.5.3 arm-unknown-linux-muslgnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2023
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 library versions: OpenSSL 1.1.1s  1 Nov 2022, LZO 2.09
2023-08-06 08:56:16 openvpn: connected to management interface
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: Connected to management server at unix_mgt.sock
2023-08-06 08:56:16 openvpn: rx: >INFO:OpenVPN Management Interface Version 3 -- type 'help' for more info
2023-08-06 08:56:16 openvpn: rx: >HOLD:Waiting for hold release:0
2023-08-06 08:56:16 openvpn: tx: hold release
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: CMD 'hold release'
2023-08-06 08:56:16 openvpn: rx: SUCCESS: hold release succeeded
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: CMD 'state on'
2023-08-06 08:56:16 openvpn: rx: SUCCESS: real-time state notification set to ON
2023-08-06 08:56:16 openvpn: rx: >PASSWORD:Need 'Auth' username/password
2023-08-06 08:56:16 openvpn: tx: username "Auth" "igor@imartial.fr"
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: CMD 'username "Auth" "igor@imartial.fr"'
2023-08-06 08:56:16 openvpn: rx: SUCCESS: 'Auth' username entered, but not yet verified
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: CMD 'password [...]'
2023-08-06 08:56:16 openvpn: rx: SUCCESS: 'Auth' password entered, but not yet verified
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: >STATE:1691304976,WILL_CONNECT,ams-a01.ipvanish.com,,,,,
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: >STATE:1691304976,RESOLVE,,,,,,
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 TCP/UDP: Preserving recently used remote address: [AF_INET]216.131.88.3:443
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 Socket Buffers: R=[180224->180224] S=[180224->180224]
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 UDP link local: (not bound)
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 UDP link remote: [AF_INET]216.131.88.3:443
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: >STATE:1691304976,WAIT,,,,,,
2023-08-06 08:56:16 openvpn: rx: >STATE:1691304976,WILL_CONNECT,ams-a01.ipvanish.com,,,,,
2023-08-06 08:56:16 openvpn: rx: >STATE:1691304976,RESOLVE,,,,,,
2023-08-06 08:56:16 openvpn: rx: >STATE:1691304976,WAIT,,,,,,
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 MANAGEMENT: >STATE:1691304976,AUTH,,,,,,
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 TLS: Initial packet from [AF_INET]216.131.88.3:443, sid=d49d4dc9 3cf38b9b
2023-08-06 08:56:16 openvpn: rx: >STATE:1691304976,AUTH,,,,,,
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 VERIFY OK: depth=1, C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=IPVanish CA, emailAddress=support@ipvanish.com
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 VERIFY X509NAME OK: C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=ams-a01.ipvanish.com, emailAddress=support@ipvanish.com
2023-08-06 08:56:16 openvpn: output: 2023-08-06 08:56:16 VERIFY OK: depth=0, C=US, ST=FL, L=Winter Park, O=IPVanish, OU=IPVanish VPN, CN=ams-a01.ipvanish.com, emailAddress=support@ipvanish.com
2023-08-06 08:56:18 openvpn: output: 2023-08-06 08:56:18 Control Channel: TLSv1.2, cipher SSLv3 DHE-RSA-AES256-SHA, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-08-06 08:56:18 openvpn: output: 2023-08-06 08:56:18 [ams-a01.ipvanish.com] Peer Connection Initiated with [AF_INET]216.131.88.3:443
2023-08-06 08:56:19 openvpn: rx: >STATE:1691304979,GET_CONFIG,,,,,,
2023-08-06 08:56:19 openvpn: output: 2023-08-06 08:56:19 MANAGEMENT: >STATE:1691304979,GET_CONFIG,,,,,,
2023-08-06 08:56:19 openvpn: output: 2023-08-06 08:56:19 SENT CONTROL [ams-a01.ipvanish.com]: 'PUSH_REQUEST' (status=1)
2023-08-06 08:56:19 openvpn: output: 2023-08-06 08:56:19 AUTH: Received control message: AUTH_FAILED
2023-08-06 08:56:19 openvpn: output: 2023-08-06 08:56:19 SIGTERM[soft,auth-failure] received, process exiting
2023-08-06 08:56:19 openvpn: output: 2023-08-06 08:56:19 MANAGEMENT: >STATE:1691304979,EXITING,auth-failure,,,,,
2023-08-06 08:56:19 openvpn: rx: >PASSWORD:Verification Failed: 'Auth'
2023-08-06 08:56:19 openvpn: username/password incorrect
2023-08-06 08:56:19 l3 is now stable
2023-08-06 08:56:19 l3 does not fulfil config requirement
2023-08-06 08:56:19 l3 state change 'l3_wait_stable' => 'l3_bring_down'
2023-08-06 08:56:19 waiting for l3 providers to go down
2023-08-06 08:56:19 l3 state change 'l3_bring_down' => 'l3_wait_down'
2023-08-06 08:56:19 l3 state change 'l3_wait_down' => 'l3_cleanup_start'
2023-08-06 08:56:19 calling helper script at '/etc/fbxconnman/conn.post-down'
2023-08-06 08:56:19 l3 state change 'l3_cleanup_start' => 'l3_wait_postdown_helper'
2023-08-06 08:56:19 openvpn: openvpn process died (0)
2023-08-06 08:56:19 l3 state change 'l3_wait_postdown_helper' => 'l3_cleanup_finish'
2023-08-06 08:56:19 l3 state change 'l3_cleanup_finish' => 'l3_finished'
2023-08-06 08:56:19 state change 'wait_l3_up' => 'wait_l3_down'
2023-08-06 08:56:19 l3 state change 'l3_finished' => 'l3_down'
2023-08-06 08:56:19 state is now DOWN
2023-08-06 08:56:19 state change 'wait_l3_down' => 'l3_finished'
2023-08-06 08:56:19 state change 'l3_finished' => 'wait_l2_down'
2023-08-06 08:56:19 l2 state change 'l2_up' => 'l2_cleanup'
2023-08-06 08:56:19 l2 state change 'l2_cleanup' => 'l2_down'
2023-08-06 08:56:19 state change 'wait_l2_down' => 'down'

Chargement...

Activer les raccourcis clavier

Liste des tâches

Détails de la tâche

Édition de la tâche