Guys, please i need help.... i followed the the instruction in the following link (
http://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide#CertificatesandKeys) to setup openvpn in both server and client, from server side i can connect, but from client side its not.... below is log files and conf files
server log
Tue Nov 27 09:28:07 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Nov 27 09:28:07 2012 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Nov 27 09:28:07 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov 27 09:28:08 2012 Diffie-Hellman initialized with 1024 bit key
Tue Nov 27 09:28:08 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 27 09:28:08 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Nov 27 09:28:08 2012 ROUTE default_gateway=192.168.1.1
Tue Nov 27 09:28:08 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{7211FA6D-81D9-4CCC-9318-E466230576F9}.tap
Tue Nov 27 09:28:08 2012 TAP-Win32 Driver Version 9.9
Tue Nov 27 09:28:08 2012 TAP-Win32 MTU=1500
Tue Nov 27 09:28:08 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {7211FA6D-81D9-4CCC-9318-E466230576F9} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Tue Nov 27 09:28:08 2012 Sleeping for 10 seconds...
Tue Nov 27 09:28:18 2012 Successful ARP Flush on interface [21] {7211FA6D-81D9-4CCC-9318-E466230576F9}
Tue Nov 27 09:28:18 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Tue Nov 27 09:28:18 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Nov 27 09:28:18 2012 Route addition via IPAPI succeeded [adaptive]
Tue Nov 27 09:28:18 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 27 09:28:18 2012 UDPv4 link local (bound): [undef]:1194
Tue Nov 27 09:28:18 2012 UDPv4 link remote: [undef]
Tue Nov 27 09:28:18 2012 MULTI: multi_init called, r=256 v=256
Tue Nov 27 09:28:18 2012 IFCONFIG POOL: base=10.8.0.4 size=62
Tue Nov 27 09:28:18 2012 IFCONFIG POOL LIST
Tue Nov 27 09:28:18 2012 Initialization Sequence Completed
Tue Nov 27 09:28:18 2012 IPv6 in tun mode is not supported in OpenVPN 2.2
client log
Tue Nov 27 09:29:16 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Nov 27 09:29:16 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov 27 09:29:16 2012 LZO compression initialized
Tue Nov 27 09:29:16 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 27 09:29:16 2012 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 27 09:29:16 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 27 09:29:16 2012 Local Options hash (VER=V4): '41690919'
Tue Nov 27 09:29:16 2012 Expected Remote Options hash (VER=V4): '530fdded'
Tue Nov 27 09:29:16 2012 UDPv4 link local: [undef]
Tue Nov 27 09:29:16 2012 UDPv4 link remote: 192.168.1.5:1194
Tue Nov 27 09:29:16 2012 TLS: Initial packet from 192.168.1.5:1194, sid=0679f8ba 3b14d133
Tue Nov 27 09:29:16 2012 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=CA/L=SanFrancisco/O=OpenVPN/OU=section/CN=OpenVPN-CA/name=changeme/emailAddress=
mohammadchaaban@gmail.com
Tue Nov 27 09:29:16 2012 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Tue Nov 27 09:29:16 2012 TLS Error: TLS object -> incoming plaintext read error
Tue Nov 27 09:29:16 2012 TLS Error: TLS handshake failed
Tue Nov 27 09:29:16 2012 TCP/UDP: Closing socket
Tue Nov 27 09:29:16 2012 SIGUSR1[soft,tls-error] received, process restarting
Tue Nov 27 09:29:16 2012 Restart pause, 2 second(s)
Tue Nov 27 09:29:18 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov 27 09:29:18 2012 Re-using SSL/TLS context
Tue Nov 27 09:29:18 2012 LZO compression initialized
