Error in the pull function/Linux 4.15

[Michael Thayer]

16.03.2018 20:33, Michael Thayer wrote:
> Update: the Cisco client can't keep the connection with 4.13 either, so
> that is probably not relevant.

Further update: 4.16rc6 from Ubuntu's mainline kernel PPA also seems to
work well.  So the problem has only been seen on the official Ubuntu
4.15.  I have not tested the Ubuntu mainline 4.15.

> 16.03.2018 14:20, Michael Thayer wrote:
>> Hello,
>>
>> This is shadowing Ubuntu launchpad bug 1754601[1].  When I boot my
>> 64-bit Ubuntu 18.04 system with the default 4.15 kernel, openconnect
>> connections to our company VPN quickly fail with the following in the
>> output:
>>
>> SSL read error: Error in the pull function.; reconnecting.
>> SSL negotiation with <server>
>> SSL connection failure: The operation timed out
>> sleep 10s, remaining timeout 300s
>> SSL negotiation with <server>
>> SSL connection failure: The operation timed out
>> sleep 20s, remaining timeout 290
>> ...
>>
>> I have seen the connection recover once that I can remember after this
>> failure.  I can still connect when I boot into the 4.13 kernel from
>> Ubuntu 17.10.  The Cisco VPN client was also unable to connect under the
>> 4.15 kernel, but I have not/never tried it with 4.13.
>>
>> [1] https://bugs.launchpad.net/ubuntu/+source/openconnect/+bug/1754601
>>
>> I have GNUTLS_DEBUG_LEVEL=99 logs for both successful (4.13) and
>> unsuccessful (4.15) connections.  What can/should I censor from the logs
>> before providing them?  URLs and IPs I assume; there do not seem to be
>> any "webvpn" lines in either file, nor user name or password.  Is there
>> anything else I can do to debug this, or is it obvious to someone?  I
>> also tried a rebuild with "--without-gnutls --with-openssl=yes" which
>> did not seem to get be anywhere either.
>>
>> Many thanks.
>> Regards
>> Michael
>>
> 

-- 
Michael Thayer | VirtualBox engineer
ORACLE Deutschland B.V. & Co. KG | Werkstr. 24 | D-71384 Weinstadt

ORACLE Deutschland B.V. & Co. KG
Hauptverwaltung: Riesstraße 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande Handelsregister
der Handelskammer Midden-Nederland, Nr. 30143697
Geschäftsführer: Alexander van der Ven, Jan Schultheiss, Val Maher