# Issues installing openvpn client on sierra wireless wp7611 **URL:** \ **Category:** Legato Linux distribution (Yocto project)\ **Created:** [December 27, 2023, 4:43pm UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672 "2023-12-27T16:43:29Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ofir](https://avatars.discourse-cdn.com/v4/letter/o/53a042/32.png) [@ofir](https://forum.legato.io/u/ofir)\ **Post date:** [December 27, 2023, 4:43pm UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/1 "2023-12-27T16:43:29Z")
I am trying to install an openvpn client on sierra wireless wp7611. but I see a weird error. Device info: ```auto # uname -a Linux swi-mdm9x28-wp 3.18.140 #1 PREEMPT Thu Dec 7 09:52:21 UTC 2023 armv7l GNU/Linux ``` This is my client config file, which is creating a good conection on my X86\_64 pc: ```auto # cat /etc/openvpn/my_client.conf client dev tun0 port 1194 proto tcp remote my.server.com 1194 resolv-retry infinite user nobody group nogroup persist-key persist-tun key /etc/openvpn/pki/my_client/my.key ca /etc/openvpn/pki/my_client/ca.crt cert /etc/openvpn/pki/my_client/my.crt remote-cert-tls server cipher AES-256-CBC verb 4 ``` I am trying to use it on the wp but with no success. Tried both on opevvpn ver 2.3.18 and 2.4.4. **On openvpn version 2.3.18 I see the following:** OpenVPN info: ```auto # openvpn --version OpenVPN 2.3.18 arm-poky-linux-gnueabi [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 12 2023 library versions: OpenSSL 1.0.2p 14 Aug 2018, LZO 2.10 Originally developed by James Yonan Copyright (C) 2002-2017 OpenVPN Technologies, Inc. Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=no enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=no enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=no with_aix_soname=aix with_broken_putenv=no with_crypto_library=openssl with_gnu_ld=yes with_libtool_sysroot=/home/notraffic-jig/dev/wpb/build_bin/tmp/work/armv7a-neon-poky-linux-gnueabi/openvpn/2.3.18-r0/recipe-sysroot with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' ``` After a while the service prints the following error indefinitely: ```auto Tue Dec 12 20:06:02 2023 us=531010 read TCPv4_CLIENT: Invalid argument (code=22) ``` Added strace info for this error: ```auto poll([{fd=3, events=POLLIN|POLLPRI}], 1, 1237) = 1 ([{fd=3, revents=POLLIN}]) gettimeofday({tv_sec=1702404362, tv_usec=528240}, NULL) = 0 recv(3, 0x7f620120, 1563, MSG_NOSIGNAL) = -1 EINVAL (Invalid argument) gettimeofday({tv_sec=1702404362, tv_usec=531010}, NULL) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=121, ...}) = 0 write(1, "Tue Dec 12 20:06:02 2023 us=5310"..., 81Tue Dec 12 20:06:02 2023 us=531010 read TCPv4_CLIENT: Invalid argument (code=22) ) = 81 ``` Added ltrace info for this error: ```auto fflush(0xb6cc9d98) = 0 free(0x7f62f3f0) = free(0x7f62eee8) = free(0x7f62e9e0) = free(0x7f61b148) = ERR_clear_error(0, 0xbed8fa50, 0x7f5ded8c, 0xaa861f00) = 0 time(nil) = 1702406446 memcmp(0x7f60adc4, 0x7f5f54c4, 8, 0x7f5f4a40) = 96 time(nil) = 1702406446 BIO_read(0x7f60d868, 0x7f60e7a0, 2048, 0x7f60e7a0) = -1 BIO_test_flags(0x7f60d868, 8, 0, 0) = 8 time(nil) = 1702406446 time(nil) = 1702406446 time(nil) = 1702406446 poll(0x7f6096a8, 1, 1094, 6057) = 1 time(nil) = 1702406446 recv(3, 0x7f6200c8, 1563, 0x4000) = -1 __errno_location() = 0xb6f17920 __errno_location() = 0xb6f17920 malloc(260) = 0x7f61b148 strerror(22) = "Invalid argument" __vsnprintf_chk(0x7f61b14c, 256, 1, -1) = 16 strlen("Invalid argument") = 16 __errno_location() = 0xb6f17920 malloc(1284) = 0x7f62e9e0 malloc(1284) = 0x7f62eee8 __vsnprintf_chk(0x7f62e9e4, 1280, 1, -1) = 45 malloc(68) = 0x7f62f3f0 gettimeofday(0xbed8f18c, nil) = 0 ctime(0xbed8f184) = "Tue Dec 12 20:40:46 2023\n" __vsnprintf_chk(0x7f62f3f4, 64, 1, -1) = 25 strlen("Tue Dec 12 20:40:46 2023\n") = 25 __vsnprintf_chk(0x7f62f40c, 40, 1, -1) = 10 strlen(" us=866956") = 10 __fprintf_chk(0xb6cc9d98, 1, 0x7f5c3990, 0x7f62f3f4Tue Dec 12 20:40:46 2023 us=866956 read TCPv4_CLIENT: Invalid argument (code=22) ``` **On openvpn version 2.4.4 I see a very similar pattern:** OpenVPN info: ```auto # openvpn --version OpenVPN 2.4.4 arm-poky-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Dec 17 2023 library versions: OpenSSL 1.0.2p 14 Aug 2018, LZO 2.10 Originally developed by James Yonan Copyright (C) 2002-2017 OpenVPN Technologies, Inc. Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=no enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=no enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_aix_soname=aix with_broken_putenv=no with_crypto_library=openssl with_gnu_ld=yes with_libtool_sysroot=/home/notraffic-jig/dev/wpb/build_bin/tmp/work/armv7a-neon-poky-linux-gnueabi/openvpn/2.4.4-r0/recipe-sysroot with_mem_check=no ``` After a while the service prints the following error indefinitely: ```auto Sun Dec 17 14:42:20 2023 us=593690 read TCP_CLIENT: Invalid argument (code=22) ``` Added strace info for this error: ```auto gettimeofday({tv_sec=1702816940, tv_usec=651993}, NULL) = 0 gettimeofday({tv_sec=1702816940, tv_usec=652647}, NULL) = 0 gettimeofday({tv_sec=1702816940, tv_usec=653174}, NULL) = 0 gettimeofday({tv_sec=1702816940, tv_usec=653929}, NULL) = 0 gettimeofday({tv_sec=1702816940, tv_usec=654123}, NULL) = 0 gettimeofday({tv_sec=1702816940, tv_usec=654625}, NULL) = 0 poll([{fd=3, events=POLLIN|POLLPRI}], 1, 1129) = 1 ([{fd=3, revents=POLLIN}]) gettimeofday({tv_sec=1702816940, tv_usec=655093}, NULL) = 0 recv(3, 0x7f63ac24, 1626, MSG_NOSIGNAL) = -1 EINVAL (Invalid argument) gettimeofday({tv_sec=1702816940, tv_usec=656162}, NULL) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=121, ...}) = 0 write(1, "Sun Dec 17 14:42:20 2023 us=6561"..., 79Sun Dec 17 14:42:20 2023 us=656162 read TCP_CLIENT: Invalid argument (code=22) ``` Added ltrace info for this error: ```auto fflush(0xb6d3dd98) = 0 free(0x7f64a028) = free(0x7f649b20) = free(0x7f649618) = ERR_clear_error(0xbec5a17c, 0, 0xbec5a12c, 0x6d56200) = 0 time(nil) = 1702817068 memcmp(0x7f620db4, 0x7f60d59c, 8, 0x7f60c9e4) = 82 time(nil) = 1702817068 BIO_read(0x7f61e850, 0x7f61f9f0, 2048, 0x7f61f9f0) = -1 BIO_test_flags(0x7f61e850, 8, 0, 0) = 8 time(nil) = 1702817068 time(nil) = 1702817068 time(nil) = 1702817068 poll(0x7f627440, 1, 1175, 0x2bf0) = 1 time(nil) = 1702817068 recv(3, 0x7f63ac24, 1626, 0x4000) = -1 __errno_location() = 0xb6f8b920 __errno_location() = 0xb6f8b920 strerror(22) = "Invalid argument" __errno_location() = 0xb6f8b920 malloc(1284) = 0x7f649618 malloc(1284) = 0x7f649b20 __vsnprintf_chk(0x7f64961c, 1280, 1, -1) = 43 malloc(68) = 0x7f64a028 gettimeofday(0xbec5a0cc, nil) = 0 ctime(0xbec5a0c4) = "Sun Dec 17 14:44:28 2023\n" __vsnprintf_chk(0x7f64a02c, 64, 1, -1) = 25 strlen("Sun Dec 17 14:44:28 2023\n") = 25 __vsnprintf_chk(0x7f64a044, 40, 1, -1) = 10 strlen(" us=614117") = 10 __fprintf_chk(0xb6d3dd98, 1, 0x7f5d91fc, 0x7f64a02cSun Dec 17 14:44:28 2023 us=614117 read TCP_CLIENT: Invalid argument (code=22) ) = 79 ``` To my understanding from looking at the strace and ltrace output the problem is that the process is trying to receive a message from a socket but for some reason it passes invalid arguments. I am not sure how to proceed. I am compiling openvpn as part of a yocto project using the following .bb file: [https://github.com/legatoproject/meta-o … n\_2.4.4.bb](https://github.com/legatoproject/meta-openembedded/blob/LXSWI2.5-1.0/meta-networking/recipes-support/openvpn/openvpn_2.4.4.bb) any help fixing/debugging would be appreciated. thanks, ---
**Author:** ![ofir](https://avatars.discourse-cdn.com/v4/letter/o/53a042/32.png) [@ofir](https://forum.legato.io/u/ofir)\ **Post date:** [December 27, 2023, 4:47pm UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/2 "2023-12-27T16:47:08Z")
Update: I tried to connect to a diffrent openvpn server which uses UDP instead of TCP, whiile using openvpn ver 2.4.4 on the WP7611 and I have a solid working conection. So seems like the issue is only present for openvpn over TCP. Creating a diffrent openvpn server using UDP only for the WP7611, is not a good option for me business wise. ---
**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.legato.io/jyijyi/32/822_2.png) [@jyijyi](https://forum.legato.io/u/jyijyi)\ **Post date:** [December 28, 2023, 2:33am UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/3 "2023-12-28T02:33:49Z")
Did you check the log on server? > ---
**Author:** ![ofir](https://avatars.discourse-cdn.com/v4/letter/o/53a042/32.png) [@ofir](https://forum.legato.io/u/ofir)\ **Post date:** [December 28, 2023, 9:35am UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/4 "2023-12-28T09:35:28Z")
I came across this StackOverflow issue and those probably aren’t related, eventhough the error messages look similar. In the StackOverflow one it’s probably config mismatch between the server and client, while in my setup it’s not since the same config is working on my pc. I looked at the server logs and there is nothing special, I can see the begging of conection establishment , I see that the server recieves the WP7611 client config, but probably afterward the WP7611 wasn’t able to finish the OpenVPN handshake because of thie `Invalid argument` error. It will take me a few days to re-create the scenario in order to fetch the server logs, but I don’t think there is anything intresting there. ---
**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.legato.io/jyijyi/32/822_2.png) [@jyijyi](https://forum.legato.io/u/jyijyi)\ **Post date:** [December 28, 2023, 9:40am UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/5 "2023-12-28T09:40:44Z")
What has been returned wrongly in the handshake? I think you should go to openvpn forum to get more clue ---
**Author:** ![ofir](https://avatars.discourse-cdn.com/v4/letter/o/53a042/32.png) [@ofir](https://forum.legato.io/u/ofir)\ **Post date:** [December 28, 2023, 10:02am UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/6 "2023-12-28T10:02:53Z")
IMO from looking at the `strace` and `ltrace` output my openvpn client is trying to receive a message from a socket but for some reason it passes invalid arguments. So thats why the connection between the client and server is not established. This error is not suppose to happen, and probably not a user error. I suspect that the `MSG_NOSIGNAL` flag used here (on the strace output): ```auto recv(3, 0x7f63ac24, 1626, MSG_NOSIGNAL) = -1 EINVAL (Invalid argument) ``` has the wrong value, which suggests that maybe openVPN wasn’t compiled correctly. Using wrong version of gcc or some similar error. So if I am correct assessing the issue, it’s either some bug need fixing, or I have something wrongly configured in my environment which I need assistance pinpointing ---
**Author:** ![jyijyi](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.legato.io/jyijyi/32/822_2.png) [@jyijyi](https://forum.legato.io/u/jyijyi)\ **Post date:** [December 28, 2023, 10:17am UTC](https://forum.legato.io/t/issues-installing-openvpn-client-on-sierra-wireless-wp7611/6672/7 "2023-12-28T10:17:24Z")
For your ok case to use udp, is it using MSG\_NOSIGNAL when recv()? Maybe similar to this one: > **[Facing TLS issue with recv() api on Legato, when using Azure IoT C SDK?](https://mangoh.discourse.group/t/facing-tls-issue-with-recv-api-on-legato-when-using-azure-iot-c-sdk/9706)** > > Hi Team, Couple of days ago, I have ported latest Azure IoT C SDK on to MangoH Yellow Board with the required source and header files. I have written required Cdef and Adef files and for Security I am using OpenSSL standard Lib provided for... I just have a trial on WP7608 R16.3 to use recv() with MSG\_NOSIGNAL, it will keep on returning a value less than zero even server is not sending anything to it. I doubt if we can use this MSG\_NOSIGNAL in FW R16.3… Are you using R16.3 with WP7611? If yes, are you able to change the source code of openvpn? (maybe put a zero in that paramter) e.g. `recv(sock , server_reply , 2000 , 0)` On the other hand, I have also tested WP7605 with R17, this time it is OK for recv() with MSG\_NOSIGNAL. So it might work for openvpn in R17. You can have some test on R17 with WP7611. (bear in mind that it cannot downgrade to R16 anymore once upgrading to R17) (in addition, you need to upgrade to R16.3 as intermediate firmware before upgrading to R17)