I have a new OpenVPN server that has been working great, but now I am unable to establish a connection from a new client location (behind a corporate firewall). I am new enough to OpenVPN that I don't know what to search for, and I confess I have not compared the logs to those during successful connections. I've using TCP instead of UDP, to no avail. Any help is appreciated.
OpenVPN GUI connection log:
Mon Jan 14 12:19:23 2013 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\limabean.log: The process cannot access the file because it is being used by another process. (errno=32)
Mon Jan 14 12:19:23 2013 OpenVPN 2.3.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jan 8 2013
Mon Jan 14 12:19:23 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Jan 14 12:19:23 2013 Need hold release from management interface, waiting...
Mon Jan 14 12:19:24 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Jan 14 12:19:24 2013 MANAGEMENT: CMD 'state on'
Mon Jan 14 12:19:24 2013 MANAGEMENT: CMD 'log all on'
Mon Jan 14 12:19:24 2013 MANAGEMENT: CMD 'hold off'
Mon Jan 14 12:19:24 2013 MANAGEMENT: CMD 'hold release'
Mon Jan 14 12:20:17 2013 MANAGEMENT: CMD 'username "Auth" "mike"'
Mon Jan 14 12:20:17 2013 MANAGEMENT: CMD 'password [...]'
Mon Jan 14 12:20:17 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 14 12:20:17 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 14 12:20:17 2013 MANAGEMENT: >STATE:1358194817,RESOLVE,,,
Mon Jan 14 12:20:17 2013 UDPv4 link local (bound): [undef]
Mon Jan 14 12:20:17 2013 UDPv4 link remote: [AF_INET]XXX.XXX.XXX.XXX:1194
Mon Jan 14 12:20:17 2013 MANAGEMENT: >STATE:1358194817,WAIT,,,
Mon Jan 14 12:20:17 2013 MANAGEMENT: >STATE:1358194817,AUTH,,,
Mon Jan 14 12:20:17 2013 TLS: Initial packet from [AF_INET]XXX.XXX.XXX.XXX:1194, sid=13992f41 c3be2d5d
Mon Jan 14 12:20:17 2013 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Jan 14 12:21:18 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 14 12:21:18 2013 TLS Error: TLS handshake failed
Mon Jan 14 12:21:18 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 14 12:21:18 2013 MANAGEMENT: >STATE:1358194878,RECONNECTING,tls-error,,
Mon Jan 14 12:21:18 2013 Restart pause, 2 second(s)
Mon Jan 14 12:21:20 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 14 12:21:20 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 14 12:21:20 2013 MANAGEMENT: >STATE:1358194880,RESOLVE,,,
Mon Jan 14 12:21:20 2013 UDPv4 link local (bound): [undef]
Mon Jan 14 12:21:20 2013 UDPv4 link remote: [AF_INET]XXX.XXX.XXX.XXX:1194
Mon Jan 14 12:21:20 2013 MANAGEMENT: >STATE:1358194880,WAIT,,,
Mon Jan 14 12:22:20 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 14 12:22:20 2013 TLS Error: TLS handshake failed
Mon Jan 14 12:22:20 2013 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 14 12:22:20 2013 MANAGEMENT: >STATE:1358194940,RECONNECTING,tls-error,,
Mon Jan 14 12:22:20 2013 Restart pause, 2 second(s)
Mon Jan 14 12:22:22 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 14 12:22:22 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 14 12:22:22 2013 MANAGEMENT: >STATE:1358194942,RESOLVE,,,
Mon Jan 14 12:22:22 2013 UDPv4 link local (bound): [undef]
Mon Jan 14 12:22:22 2013 UDPv4 link remote: [AF_INET]XXX.XXX.XXX.XXX:1194
Mon Jan 14 12:22:22 2013 MANAGEMENT: >STATE:1358194942,WAIT,,,
Mon Jan 14 12:22:22 2013 MANAGEMENT: >STATE:1358194942,AUTH,,,
Mon Jan 14 12:22:22 2013 TLS: Initial packet from [AF_INET]XXX.XXX.XXX.XXX:1194, sid=14a4b159 0b46ba70
Client config (Windows 7):
client
remote my.server.fqdn
port 1194
proto udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 86400
auth-user-pass
auth-retry interact
comp-lzo yes
verb 3
ca ca.crt
cert "client1.crt"
key "client1.key"
management 127.0.0.1 1194
management-hold
management-query-passwords
auth-retry interact
Server config (Ubuntu 12.04):
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
