fantomtk
2012-Dec-07 07:27 UTC
Tinc 1.1pre3, 1.1pre4 hangs after some time, on win32 platform
Dear tinc members! Recently I ran into some problems when trying to test the new tinc 1.1 builds under windows. The main problem is that the tincd daemon randomly hangs (usually in first 1-3 minutes after start). Sometimes it happens quietly, and the log does not display anything. But from time to time, there are bunch of decryption errors ("Error while decrypting: error:06065064:digital envelope routines..") before the actual hanging I've alerady tried to recreate all config files (including encryption keys) for both sides, and minimizing them by remove all unnecessary things. Here is the current configs: Side 1: tinc.conf Name = client ConnectTo = server Mode = switch Side 2: tinc.conf Name = server ConnectTo = client Mode = switch host configs contains only Address=XXX and the crypto keys as shown below: Address = wan1.ourdomain (wan2.ourdomain for other side) -----BEGIN RSA PUBLIC KEY----- (cut) -----END RSA PUBLIC KEY----- ECDSAPublicKey = (cut) PS: tinc 1.0.19, which runs in our production environment runs perfectly with same configs on the same machines I'll appreciate any help or advice on that problem! Thanks in advance
Guus Sliepen
2012-Dec-07 14:55 UTC
Tinc 1.1pre3, 1.1pre4 hangs after some time, on win32 platform
On Fri, Dec 07, 2012 at 11:27:33AM +0400, fantomtk wrote:> Recently I ran into some problems when trying to test the new tinc 1.1 builds under windows. The main problem is that the tincd daemon randomly hangs (usually in first 1-3 minutes after start). Sometimes it happens quietly, and the log does not display anything. But from time to time, there are bunch of decryption errors ("Error while decrypting: error:06065064:digital envelope routines..") before the actual hanging.The decryption errors are likely harmless, these can occur when UDP packets overtake session key exchange via TCP. I could reproduce the hangs; a bug in the processing of periodic events caused an infinite loop to occur. It is now fixed in git. I'll release a new version with the fix soon. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: Digital signature URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20121207/21645396/attachment.pgp>