Re: 【外部邮件】Re: openconnect connection is successful, unable to receive data

[ping gao 高平(0)]

Thank you for your reply
   Update Ocserv to 0.11.9 The problem persists,
My OS Info:
CentOS Linux release 7.2.1511 (Core)

> 在 2017年11月21日，下午7:11，Nikos Mavrogiannopoulos <n.mavrogiannopoulos at gmail.com> 写道：
> 
> Do you use the rhel7.4 version of centos7? That seems like a
> regression from the epel to the rhel protobuf-c libraries.
> 
> Does the new build over that version address that?
> https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-35c633c003
> 
> On Tue, Nov 21, 2017 at 8:35 AM, ping gao 高平(0) <ping.gao at corp.elong.com> wrote:
>> hi all
>>   I use openconnect to connect ocserv server, you can connect successfully, but can not receive downlink data，
>> Trouble to help answer the next
>> 
>> OS Info:
>> 
>> Server:
>>   Centos7
>>  Ocserv 0.11.8
>> Compiled with: seccomp, tcp-wrappers, oath, radius, gssapi, PAM, PKCS#11, AnyConnect
>> GnuTLS version: 3.3.26 (compiled with 3.3.24)
>> 
>> Client:
>>   Ubuntu 16.04
>>  OpenConnect version v7.06
>> Using GnuTLS. Features present: PKCS#11, RSA software token, HOTP software token, TOTP software token, System keys, DTLS
>> 
>> The following ocserv server debug 100 output：
>> 
>> ocserv[5123]: main: performing maintenance (banned IPs: 1)
>> ocserv[5124]: sec-mod: performing maintenance
>> ocserv[5124]: sec-mod: active sessions 1
>> ocserv[5123]: main: main received message 'unknown (248)' from sec-mod of 10 bytes
>> ocserv[5127]: TLS[<5>]: REC[0x7f6c443e1010]: SSL 3.3 Application Data packet received. Epoch 0, length: 108
>> ocserv[5127]: TLS[<5>]: REC[0x7f6c443e1010]: Expected Packet Application Data(23)
>> ocserv[5127]: TLS[<5>]: REC[0x7f6c443e1010]: Received Packet Application Data(23) with length: 108
>> ocserv[5127]: TLS[<5>]: REC[0x7f6c443e1010]: Decrypted Packet[590] Application Data(23) with length: 84
>> ocserv[5127]: worker[user]: 192.168.35.65 received 84 byte(s) (TLS)
>> ocserv[5127]: worker[user]: 192.168.35.65 writing 76 byte(s) to TUN
>> _______________________________________________
>> openconnect-devel mailing list
>> openconnect-devel at lists.infradead.org
>> http://lists.infradead.org/mailman/listinfo/openconnect-devel