问题描述

采用docker安装openvpn报错，如何解决？ 开源地址：
https://github.com/kylemanna/...

问题出现的环境背景

centos版本VM_0_7_centos 3.10.0-1062.9.1.el7.x86_64
openssl 版本 OpenSSL 1.0.2k-fips 26 Jan 2017

服务端报错：
2019-12-30T02:19:47.836882945Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 TLS: Initial packet from [AF_INET]120.236.176.138:34373, sid=a0677b8f 143dc657
2019-12-30T02:19:47.926372417Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 VERIFY ERROR: depth=0, error=certificate revoked: CN=caoqiwen2001
2019-12-30T02:19:47.926409246Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 OpenSSL: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed
2019-12-30T02:19:47.926414918Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 TLS_ERROR: BIO read tls_read_plaintext error
2019-12-30T02:19:47.926419017Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 TLS Error: TLS object -> incoming plaintext read error
2019-12-30T02:19:47.926423656Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 TLS Error: TLS handshake failed
2019-12-30T02:19:47.926427641Z Mon Dec 30 10:19:47 2019 120.236.176.138:34373 SIGUSR1[soft,tls-error] received, client-instance restarting

客户端报错：
Mon Dec 30 10:19:45 2019 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Mon Dec 30 10:19:45 2019 Windows version 6.1 (Windows 7) 64bit
Mon Dec 30 10:19:45 2019 library versions: OpenSSL 1.1.0l 10 Sep 2019, LZO 2.10
Mon Dec 30 10:19:48 2019 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Dec 30 10:19:48 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]111.229.163.77:1194
Mon Dec 30 10:19:48 2019 UDP link local: (not bound)
Mon Dec 30 10:19:48 2019 UDP link remote: [AF_INET]111.229.163.77:1194
Mon Dec 30 10:20:47 2019 SIGHUP[hard,] received, process restarting
Mon Dec 30 10:20:47 2019 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Mon Dec 30 10:20:47 2019 Windows version 6.1 (Windows 7) 64bit
Mon Dec 30 10:20:47 2019 library versions: OpenSSL 1.1.0l 10 Sep 2019, LZO 2.10
Mon Dec 30 10:20:52 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]111.229.163.77:1194
Mon Dec 30 10:20:52 2019 UDP link local: (not bound)
Mon Dec 30 10:20:52 2019 UDP link remote: [AF_INET]111.229.163.77:1194
Mon Dec 30 10:21:52 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Dec 30 10:21:52 2019 TLS Error: TLS handshake failed

尝试方法

之前以为是容器的时间和宿主机的时间不一致造成，后面改成一致还是报上面的错误。