ink.pj
Am trying to connect to OPENVPN (ver 1.8.3 ) server running on RedHat 4 64bit Unix kernel. Am able to connect fine using a OPENVPN client (OpenVPN connect ver 1.8.3 ) from MacOS 10.5
However connecting to the same OpenVPN server from a Unix client from an AWS box running RedHat ver 5, 64 bit I get a "TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)"
The connectivity i.e. the server is accepting packets on 1194 UDP (as well as TCP) and since I'm able to connect from a MacOS client to the same server its unlikely to be an IP address/connectivity issue.
The server conf file is standard stuff.
Here's the conf file for the Unix client that is having problems:
______________________________________________
client
dev tun
proto udp
remote 50.57.32.38 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert name-of-cert-file.crt
key name-of-key-file.key
ns-cert-type server
comp-lzo
verb 3
_________________________________________
This is the what I get on stdout:
_________________________________________
/usr/sbin/openvpn --config client.conf
Sat Mar 10 04:46:57 2012 OpenVPN 2.1.4 x86_64-amazon-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Jul 28 2011
Sat Mar 10 04:46:57 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Mar 10 04:46:57 2012 LZO compression initialized
Sat Mar 10 04:46:57 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 10 04:46:57 2012 Socket Buffers: R=[124928->131072] S=[124928->131072]
Sat Mar 10 04:46:57 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Mar 10 04:46:57 2012 Local Options hash (VER=V4): '41690919'
Sat Mar 10 04:46:57 2012 Expected Remote Options hash (VER=V4): '530fdded'
Sat Mar 10 04:46:57 2012 UDPv4 link local: [undef]
Sat Mar 10 04:46:57 2012 UDPv4 link remote: 50.57.32.38:1194
Sat Mar 10 04:47:57 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Mar 10 04:47:57 2012 TLS Error: TLS handshake failed
Sat Mar 10 04:47:57 2012 TCP/UDP: Closing socket
Sat Mar 10 04:47:57 2012 SIGUSR1[soft,tls-error] received, process restarting
Sat Mar 10 04:47:57 2012 Restart pause, 2 second(s)
___________________________________________________
And here's the conf file from the MacOS which works fine:
___________________________________________________
setenv FORWARD_COMPATIBLE 1
client
server-poll-timeout 4
nobind
remote 50.57.32.38 1194 udp
remote 50.57.32.38 1194 udp
remote 50.57.32.38 443 tcp
remote 50.57.32.38 1194 udp
remote 50.57.32.38 1194 udp
remote 50.57.32.38 1194 udp
remote 50.57.32.38 1194 udp
remote 50.57.32.38 1194 udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
auth-user-pass
comp-lzo no
verb 3
setenv PUSH_PEER_INFO
<ca>
ca.cert
</ca>
<cert>
private.crt
</cert>
<key>
private.key
</key>
key-direction 1
<tls-auth>
openvpn static key
</tls-auth>
