yangyang 于 2012-06-12 12:32(11 年以前) 发表:
LZ，我在一块 ARM 开发板上交叉编译了一个 OpenVPN，现在在 PC 上访问失败。我把信息贴在后面，希望 LZ 能够帮忙看一下。
ARM：Linux 3.0.1,OpenVPN 2.0.9
报错为：
connection reset by peer code 104 openvpn
PC：Ubuntu 11.10 x86_64 OpenVPN 2.0.9
报错为：
Tue Jun 12 12:18:37 2012 OpenVPN 2.0.9 x86_64-unknown-linux [SSL] [LZO] [EPOLL] built on Jun 12 2012
Tue Jun 12 12:18:37 2012 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Tue Jun 12 12:18:37 2012 LZO compression initialized
Tue Jun 12 12:18:37 2012 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Jun 12 12:18:37 2012 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 12 12:18:37 2012 Local Options hash (VER=V4): '69109d17'
Tue Jun 12 12:18:37 2012 Expected Remote Options hash (VER=V4): 'c0103fa8'
Tue Jun 12 12:18:37 2012 Attempting to establish TCP connection with 192.168.8.115:1194
Tue Jun 12 12:18:37 2012 TCP connection established with 192.168.8.115:1194
Tue Jun 12 12:18:37 2012 TCPv4_CLIENT link local: [undef]
Tue Jun 12 12:18:37 2012 TCPv4_CLIENT link remote: 192.168.8.115:1194
Tue Jun 12 12:18:37 2012 TLS: Initial packet from 192.168.8.115:1194, sid=4f1fdbe7 8434e7e9
Tue Jun 12 12:18:38 2012 VERIFY OK: depth=1, /C=CN/ST=JS/L=NANTONG/O=HNCST/OU=CS/CN=6410-Server/emailAddress=kormny@gmail.com
Tue Jun 12 12:18:38 2012 VERIFY OK: nsCertType=SERVER
Tue Jun 12 12:18:38 2012 VERIFY OK: depth=0, /C=CN/ST=JS/O=HNCST/OU=CS/CN=6410-Server/emailAddress=kormny@gmail.com
Tue Jun 12 12:18:38 2012 TLS_ERROR: BIO read tls_read_plaintext error: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature: error:1408D07B:SSL routines:SSL3_GET_KEY_EXCHANGE:bad signature
Tue Jun 12 12:18:38 2012 TLS Error: TLS object -> incoming plaintext read error
Tue Jun 12 12:18:38 2012 TLS Error: TLS handshake failed
Tue Jun 12 12:18:38 2012 Fatal TLS error (check_tls_errors_co), restarting
Tue Jun 12 12:18:38 2012 TCP/UDP: Closing socket
Tue Jun 12 12:18:38 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Jun 12 12:18:38 2012 Restart pause, 5 second(s)
网上有资料提到说这个报错可能是时间错误导致的，所以我在 ARM 上移植了 ntpdate，每次开机时都会同步一次时间，应该不是时间出错的问题。