Cannot Connect--frustrating

salecko

For the past week i've been thinking that the yellow meant it was connected, but i've been fooled. I constantly get logs like the ones below, every second, and im not sure how to fix it. I have the port 1194 forward, and windows firewall turned off. Please help. thanks

Mon Mar 12 19:07:25 2012 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Mar 12 19:07:25 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Mar 12 19:07:25 2012 Re-using SSL/TLS context
Mon Mar 12 19:07:25 2012 LZO compression initialized
Mon Mar 12 19:07:25 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 12 19:07:25 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Mar 12 19:07:25 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 12 19:07:25 2012 Local Options hash (VER=V4): '41690919'
Mon Mar 12 19:07:25 2012 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 12 19:07:25 2012 UDPv4 link local: [undef]
Mon Mar 12 19:07:25 2012 UDPv4 link remote: 174.127.99.152:1194
Mon Mar 12 19:07:25 2012 TLS: Initial packet from 174.127.99.152:1194, sid=455d347a e895a57a
Mon Mar 12 19:07:25 2012 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=DC/L=Washington/O=nVpn/CN=nVpn_CA/emailAddress=support@nvpn.net
Mon Mar 12 19:07:25 2012 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mon Mar 12 19:07:25 2012 TLS Error: TLS object -> incoming plaintext read error
Mon Mar 12 19:07:25 2012 TLS Error: TLS handshake failed
Mon Mar 12 19:07:25 2012 TCP/UDP: Closing socket
Mon Mar 12 19:07:25 2012 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 12 19:07:25 2012 Restart pause, 2 second(s)

janjust

this log line

Mon Mar 12 19:07:25 2012 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=DC/L=Washington/O=nVpn/CN=nVpn_CA/emailAddress=support@nvpn.net

says that there's a problem with your certificates (my guess is on the server side). make sure you're using the right ca/cert/key combinations on both ends.

salecko

How would I go about doing that?

salecko

Okay, I got it down to this now, since i used a diffferent port.

Tue Mar 13 17:16:13 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Mar 13 17:16:27 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Mar 13 17:16:27 2012 LZO compression initialized
Tue Mar 13 17:16:27 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Mar 13 17:16:27 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Mar 13 17:16:27 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Mar 13 17:16:27 2012 Local Options hash (VER=V4): '41690919'
Tue Mar 13 17:16:27 2012 Expected Remote Options hash (VER=V4): '530fdded'
Tue Mar 13 17:16:27 2012 UDPv4 link local: [undef]
Tue Mar 13 17:16:27 2012 UDPv4 link remote: 174.127.99.152:3333
Tue Mar 13 17:17:27 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Mar 13 17:17:27 2012 TLS Error: TLS handshake failed
Tue Mar 13 17:17:27 2012 TCP/UDP: Closing socket
Tue Mar 13 17:17:27 2012 SIGUSR1[soft,tls-error] received, process restarting

My windows firewall is disabled, and all ports are forwarded

janjust

check the server-side log - most likely you will still find the certificate error; without config files and info about the certificates and keys used it is impossible to tell what is going on exactly.