Client VPN doesn't work suddently

1

I have a client VPN endpoint in ap-southeast-1 region. I was able to connect to the VPN using OpenVPN Connect on 29 Nov 2022. But now I cannot connect any more. No configuration changes to the VPN endpoint. The ssl cert is still valid. OpenVPN only shows timeout. What could go wrong? Any hint is appreciated.

已提問 1 年前檢視次數 983 次
2 個答案
1

It would be good, if you could have posted the actuall error. I assume that you might have mutual authentication . Please refer to the below articles for troubleshooting.

https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/troubleshooting.html

https://docs.aws.amazon.com/vpn/latest/clientvpn-user/common-troubleshooting.html

If you still face issues, please post with more logs .

AWS
已回答 1 年前
  • Here's the snippet of the OpenVPN Connect log. Seems the DNS server was resolved but the ssl handshake failed.

    Connecting to [ascfd.cvpn-endpoint-xxxxxxxxxxxx.prod.clientvpn.ap-southeast-1.amazonaws.com]:443 (xx.xxx.xxx.xxx) via UDPv4 EVENT: CONNECTING Tunnel Options:V4,dev-type tun,link-mtu 1521,tun-mtu 1500,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client ... Session invalidated: KEEPALIVE_TIMEOUT Client terminated, restarting in..

  • I re-created a new server certificate and a few client certificates. Still doesn't work.

  • Im facing a similar issue, everything worked great, no changes were made at all, I can connect but now nothing resolves. I cannot get online or hit internal resources.

1

The culprit is the client certificate revocation list (crl), which expired on 30 Nov 2022. The resolution is to generate a new crl and upload to the client vpn endpoint.

已回答 1 年前
  • I had the same issue, and solved it based on @blacktulip11's comment. You can check crl expiration via:

    openssl crl -in file.crl -text

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南