3CX SIP server fails on two openvpn connections

[Yaroslav]

Hello!

I made two VPN connection (to office and to my cloud VPN server) and SIP Server stopped:

Sep 28 21:40:43 3cx kernel: [204081.612307] 3CXPhoneSystem[14736]: segfault at 0 ip 0000000000519e9b sp 00007f1284fa23d0 error 4 in 3CXPhoneSystem[400000+3d2000]

Here is some info

root@3cx:~# service 3CXPhoneSystem01 status
● 3CXPhoneSystem01.service - 3CX PhoneSystem 01 SIP Server
   Loaded: loaded (/lib/systemd/system/3CXPhoneSystem01.service; enabled; vendor preset: enabled)
   Active: failed (Result: signal) since Fri 2018-09-28 21:40:43 MSK; 1s ago
  Process: 14810 ExecStopPost=/bin/rm -f /var/run/phonesystem/3CXPhoneSystem01.pid (code=exited, status=0/SUCCESS)
  Process: 14721 ExecStart=/usr/sbin/3CXPhoneSystem -p /var/run/phonesystem/3CXPhoneSystem01.pid /var/lib/3cxpbx/Instance1/Bin/3CXPho
neSystem.ini (code=killed, signal=SEGV)
 Main PID: 14721 (code=killed, signal=SEGV)

Sep 28 21:39:36 3cx systemd[1]: Starting 3CX PhoneSystem 01 SIP Server...
Sep 28 21:39:37 3cx systemd[1]: Started 3CX PhoneSystem 01 SIP Server.
Sep 28 21:40:43 3cx systemd[1]: 3CXPhoneSystem01.service: Main process exited, code=killed, status=11/SEGV
Sep 28 21:40:43 3cx systemd[1]: 3CXPhoneSystem01.service: Unit entered failed state.
Sep 28 21:40:43 3cx systemd[1]: 3CXPhoneSystem01.service: Failed with result 'signal'.
root@3cx:~# ps aux | grep openvpn
root     14795  0.0  0.6  41968  6720 pts/2    S    21:40   0:00 openvpn --route-noexec --config cloudVPN-direct.ovpn
root     14850  0.0  0.0  12756   996 pts/2    S+   21:41   0:00 grep openvpn
root     21265  0.0  0.5  42252  5900 ?        Ss   10:00   0:08 openvpn --config work.ovpn

This is problem config:

client
remote X.X.X.X 636
proto tcp
dev tun
cipher AES-256-CBC
auth SHA256
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name chunk-note-giant name
tls-version-min 1.2
compress
verb 3
route X.X.X.X 255.255.255.255 net_gateway

<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
</key>

<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-crypt>

Can you please help me to debug and fix this issue?
My 3CX host OS id Debian 9 and 3CX PBX version is 15.5.0 beta

 

[eddv123]

Why are you using open VPN ? This is an un-supported setup.

Where I have known people to use Open VPN without issue, I would say why bother when you have supported methods of STUN and SBC you can use.

 

[cobaltit]

Guides clearly state no VPN on the PBX. Not going to find much help here.

 

[YiannisH_3CX]

Hello @Yaroslav

As mentioned you should not run a VPN software on the 3CX server as this could cause issues like the one you are experiencing. The VPN should be done on your firewall/router, not on the PBX.