Dear All,
I really need somebody help as I have been trying more than one week to solve the TLS Error!.
I have openvpn installed on my WD my book world (white), trying to connect from work with no success, but I can connect to openvpn server at home lan. below is my settings:
1. Openvpn server settings, WD My book world (white) with openvpn 2.2:
a. openvpn - 2.2.0-1 - SSL based VPN server with Windows client support
openvpn.conf file:
push "route 192.168.1.0 255.255.255.0"
server 192.168.3.0 255.255.255.0
dev tun0
proto udp
port 1194
keepalive 10 120
daemon
verb 3
comp-lzo
client-to-client
duplicate-cn
tls-server
dh dh1024.pem
ca ca.crt
cert OpenVPNserver.crt
key OpenVPNserver.key
2. Client configuration (Windows 7 64bit with openvpn gui):
0VClient.ovpn
script-security 2
client
dev tun0
proto udp
remote xxx.no-ip.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert 0VClient.crt
key 0VClient.key
ns-cert-type server
comp-lzo
verb 3
3. Router configuration: Linksys E1000v2 with (Firmware: DD-WRT v24-sp2 (03/19/12) std-nokaid-small 18777)
iptables -nvL | grep 1194
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1194
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.103 tcp dpt:1194
0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.103 udp dpt:1194
Commands scripts (Firewall)
iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -p tcp --dport 1194 -j ACCEPT
iptables -A FORWARD --src 192.168.3.0/24 -j ACCEPT
iptables -A FORWARD --src 192.168.1.0/24 -j ACCEPT
- Client log
Sun Sep 23 11:33:13 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun Sep 23 11:33:13 2012 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sun Sep 23 11:33:13 2012 LZO compression initialized
Sun Sep 23 11:33:13 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Sep 23 11:33:13 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 23 11:33:13 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Sep 23 11:33:13 2012 Local Options hash (VER=V4): '41690919'
Sun Sep 23 11:33:13 2012 Expected Remote Options hash (VER=V4): '530fdded'
Sun Sep 23 11:33:13 2012 UDPv4 link local: [undef]
Sun Sep 23 11:33:13 2012 UDPv4 link remote: xx.xx.xx.xxx:1194
Sun Sep 23 11:34:13 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Sep 23 11:34:13 2012 TLS Error: TLS handshake failed
Sun Sep 23 11:34:13 2012 TCP/UDP: Closing socket
Sun Sep 23 11:34:13 2012 SIGUSR1[soft,tls-error] received, process restarting
Sun Sep 23 11:34:13 2012 Restart pause, 2 second(s)
I would really approciate support.
cheers
Sergey
