升级 Ocserv 10.3 后 不能正常使用

[Dean]

查看oscerv服务状态如下

ocserv.service - OpenConnect SSL VPN server
Loaded: loaded (/usr/lib/systemd/system/ocserv.service; enabled)
Active: active (running) since 日 2015-05-31 00:14:07 EDT; 37min ago
Docs: man:ocserv(8)
Main PID: 653 (ocserv-main)
CGroup: /system.slice/ocserv.service
├─653 /usr/local/sbin/ocserv --foreground --pid-file /var/run/ocserv.pid --config /usr/local/etc/ocserv/ocserv.conf
└─654 /usr/local/sbin/ocserv --foreground --pid-file /var/run/ocserv.pid --config /usr/local/etc/ocserv/ocserv.conf

5月 31 00:14:07 localhost.localdomain ocserv[654]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.653)
5月 31 00:30:04 localhost.localdomain ocserv[757]: worker: could not disable system calls, kernel might not support seccomp
5月 31 00:30:04 localhost.localdomain ocserv[757]: worker: tlslib.c:328: warning: Received record packet of unknown type 71
5月 31 00:30:04 localhost.localdomain ocserv[757]: GnuTLS error (at worker-vpn.c:433): An unexpected TLS packet was received.
5月 31 00:30:04 localhost.localdomain ocserv[653]: main: 198.35.46.8:34197 user '' disconnected
5月 31 00:30:04 localhost.localdomain ocserv[758]: worker: could not disable system calls, kernel might not support seccomp
5月 31 00:30:05 localhost.localdomain ocserv[758]: GnuTLS error (at worker-vpn.c:433): The TLS connection was non-properly terminated.
5月 31 00:30:05 localhost.localdomain ocserv[653]: main: 198.35.46.8:34198 user '' disconnected
5月 31 00:32:11 localhost.localdomain systemd[1]: Started OpenConnect SSL VPN server.
5月 31 00:46:22 localhost.localdomain systemd[1]: Started OpenConnect SSL VPN server.

[Dean]

好无聊啊😂，竟然是自己回答的 主要是gnutls-utils依赖太久了 yum install gnutls-utils -y

[lenovo]

为何不升级到0.10.5？

[shangjiyu]

@lenovo 从WIFI切换到移动网络 再切换到 WIFI看看 两个切换间 anyconnect 能不能 自动重连？

[tinkerer]

kernel not support seccomp. 配置文件里把 isolate 设置为false 试试

[webdev]

求傻瓜安装教程

[lucifer9]

0.10.5 如果用 CentOS 7 自带的 libasn1 就会在网络环境切换时候没法儿自动重连。目测是 0.10.3 就开始了。0.10.2 会说系统的 libasn1 版本太低，手动安装最新的 libasn1 以后指定链接自己装的就正常了，也可以自动重连。不过古怪的是测试过 0.10.5 即使用自己手动装的 libasn1 也还是有重连的问题。现在只好先停在 0.10.2 用着，好在也没啥大 bug。

[Dean]

@tinkerer 配置文件已改isolate-workers = false重启生效