openvpn egyszercsak nem megy...

Csinaltam par hete egy jo kis openvpn tap halozatot, tokkal-vonoval, mukodott szepen. Egeszen mostanaig. A szerveren ilyesmiket latok a syslogban, hogy:

Nov 28 18:48:51 xyz ovpn-xxnet.srv[16840]: TUN/TAP device tap1 opened
Nov 28 18:48:51 xyz ovpn-xxnet.srv[16840]: ifconfig tap1 172.31.42.1 netmask 255.255.255.0 mtu 1500 broadcast 172.31.42.255
Nov 28 18:48:51 xyz ovpn-xxnet.srv[16845]: UDPv4 link local (bound): [undef]:5648
Nov 28 18:48:51 xyz ovpn-xxnet.srv[16845]: UDPv4 link remote: [undef]
Nov 28 18:48:51 xyz ovpn-xxnet.srv[16845]: Initialization Sequence Completed
Nov 28 18:48:51 xyz ovpn-xxnet.srv[16845]: 1.1.1.1:5648 Re-using SSL/TLS context
Nov 28 18:48:52 xyz ovpn-xxnet.srv[16845]: 1.1.1.2:5648 Re-using SSL/TLS context
Nov 28 18:48:53 xyz ovpn-xxnet.srv[16845]: 1.1.1.3:5648 Re-using SSL/TLS context

majd egy ido utan ilyenek jonnek, hogy:

Nov 28 18:49:53 xyz ovpn-xxnet.srv[16845]: 1.1.1.1:5648 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 28 18:49:53 xyz ovpn-xxnet.srv[16845]: 1.1.1.1:5648 TLS Error: TLS handshake failed
Nov 28 18:49:53 xyz ovpn-xxnet.srv[16845]: 1.1.1.1:5648 Re-using SSL/TLS context
Nov 28 18:49:56 xyz ovpn-xxnet.srv[16845]: read UDPv4 [ECONNREFUSED|ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Nov 28 18:49:56 xyz ovpn-xxnet.srv[16845]: read UDPv4 [ECONNREFUSED|ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Nov 28 18:50:52 xyz ovpn-xxnet.srv[16845]: 1.1.1.2:5648 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 28 18:50:52 xyz ovpn-xxnet.srv[16845]: 1.1.1.2:5648 TLS Error: TLS handshake failed
Nov 28 18:50:52 xyz ovpn-xxnet.srv[16845]: 1.1.1.2:5648 Re-using SSL/TLS context

igy a vegtelensegig, 1 perces periodusban. Sajnos kicsit keson kapcsoltam, igy mivel a syslog csak az elmult 6-7 napra van meg, nem tudom mi tortent elotte, de kb. ~2 hete me'g mukodott. Az SSL/TLS cuccokhoz nem nyultam, lehet hogy lejart valamelyik alairt certificate? De akkor meg miert jonnek ezek a read UDPv4 | econnrefused uzenetek...? Az 5648-as UDP port nyitott, azt netcat-tal megneztem, tenyleg mukodik.

Furcsa... latott valaki ilyesmit ma'r?

A.