i got this error when i want to connect to openvpn:
TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_ACK_V1)
and on server log i got :
[ECONNREFUSED]: Connection refused (code=111)
###MY Client Info and details###
my client is:
Os=linux mint 14 (64bit)
kernel=3.5.0-17-generic
openvpn-version=2.2.1-8ubuntu2
my config is:
client
remote 192.168.1.12 1194
dev tun
comp-lzo
ca ca.crt
cert client1.crt
key client1.key
route-delay 2
route-method exe
redirect-gateway def1
dhcp-option DNS 10.8.0.1
verb 3
when i run i got this error:
mrg@mrg-Asus-L ~/keys/keys $ openvpn --config server.ovpn
Sun Mar 10 17:45:52 2013 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 8 2012
Sun Mar 10 17:45:52 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Mar 10 17:45:52 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Mar 10 17:45:52 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Mar 10 17:45:52 2013 LZO compression initialized
Sun Mar 10 17:45:52 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Mar 10 17:45:52 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Mar 10 17:45:52 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Mar 10 17:45:52 2013 Local Options hash (VER=V4): '41690919'
Sun Mar 10 17:45:52 2013 Expected Remote Options hash (VER=V4): '530fdded'
Sun Mar 10 17:45:52 2013 UDPv4 link local (bound): [undef]
Sun Mar 10 17:45:52 2013 UDPv4 link remote: [AF_INET]192.168.1.12:1194
Sun Mar 10 17:45:52 2013 TLS: Initial packet from [AF_INET]192.168.1.12:1194, sid=91bf0c3e 9cc35505
Sun Mar 10 17:45:52 2013 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=me@myhost.mydomain
Sun Mar 10 17:45:52 2013 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sun Mar 10 17:45:52 2013 TLS Error: TLS object -> incoming plaintext read error
Sun Mar 10 17:45:52 2013 TLS Error: TLS handshake failed
Sun Mar 10 17:45:52 2013 TCP/UDP: Closing socket
Sun Mar 10 17:45:52 2013 SIGUSR1[soft,tls-error] received, process restarting
Sun Mar 10 17:45:52 2013 Restart pause, 2 second(s)
Sun Mar 10 17:45:54 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Mar 10 17:45:54 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Mar 10 17:45:54 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Mar 10 17:45:54 2013 LZO compression initialized
Sun Mar 10 17:45:54 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Mar 10 17:45:54 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Mar 10 17:45:54 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Mar 10 17:45:54 2013 Local Options hash (VER=V4): '41690919'
Sun Mar 10 17:45:54 2013 Expected Remote Options hash (VER=V4): '530fdded'
Sun Mar 10 17:45:54 2013 UDPv4 link local (bound): [undef]
Sun Mar 10 17:45:54 2013 UDPv4 link remote: [AF_INET]192.168.1.12:1194
Sun Mar 10 17:45:54 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:54 2013 TLS: Initial packet from [AF_INET]192.168.1.12:1194, sid=d74981ab b4a7ee7c
Sun Mar 10 17:45:54 2013 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/emailAddress=me@myhost.mydomain
Sun Mar 10 17:45:54 2013 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sun Mar 10 17:45:54 2013 TLS Error: TLS object -> incoming plaintext read error
Sun Mar 10 17:45:54 2013 TLS Error: TLS handshake failed
Sun Mar 10 17:45:54 2013 TCP/UDP: Closing socket
Sun Mar 10 17:45:54 2013 SIGUSR1[soft,tls-error] received, process restarting
Sun Mar 10 17:45:54 2013 Restart pause, 2 second(s)
Sun Mar 10 17:45:56 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Sun Mar 10 17:45:56 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Mar 10 17:45:56 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Mar 10 17:45:56 2013 LZO compression initialized
Sun Mar 10 17:45:56 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Mar 10 17:45:56 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Mar 10 17:45:56 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Mar 10 17:45:56 2013 Local Options hash (VER=V4): '41690919'
Sun Mar 10 17:45:56 2013 Expected Remote Options hash (VER=V4): '530fdded'
Sun Mar 10 17:45:56 2013 UDPv4 link local (bound): [undef]
Sun Mar 10 17:45:56 2013 UDPv4 link remote: [AF_INET]192.168.1.12:1194
Sun Mar 10 17:45:56 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:56 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:57 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:57 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:58 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:58 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_CONTROL_V1)
Sun Mar 10 17:45:58 2013 TLS Error: Unroutable control packet received from [AF_INET]192.168.1.12:1194 (si=3 op=P_ACK_V1)
^CSun Mar 10 17:45:59 2013 event_wait : Interrupted system call (code=4)
Sun Mar 10 17:45:59 2013 TCP/UDP: Closing socket
Sun Mar 10 17:45:59 2013 SIGINT[hard,] received, process exiting
###My server Information and errors###
my server is:
Os=linux debian 32bit
kernel=2.6.32-5-486
openvpn-version=openvpn/squeeze uptodate 2.1.3-2+squeeze1
my server config is:
server:/etc/openvpn/easy-rsa/2.0/keys# cat /etc/openvpn/openvpn.conf
dev tun
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
push "route 10.8.0.0 255.255.255.0"
push "redirect-gateway"
push "explicit-exit-notify 3"
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
group daemon
daemon
Some command output:
# cat /etc/network/interfaces
auto lo
iface lo inet loopback
auto eth1
iface eth1 inet static
address 192.168.1.12
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.1
# ifconfig
eth1 Link encap:Ethernet HWaddr 08:00:27:03:06:fa
inet addr:192.168.1.12 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe03:6fa/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:50747 errors:0 dropped:0 overruns:0 frame:0
TX packets:36962 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:51454658 (49.0 MiB) TX bytes:3826770 (3.6 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:44 errors:0 dropped:0 overruns:0 frame:0
TX packets:44 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:3080 (3.0 KiB) TX bytes:3080 (3.0 KiB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
# cat /etc/iptables.conf
# Generated by iptables-save v1.4.8 on Sun Mar 10 15:41:17 2013
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -s 10.8.0.0/24 -o venet0 -j MASQUERADE
COMMIT
# Completed on Sun Mar 10 15:41:17 2013
# telnet 127.0.0.1 1194
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused
# netstat -l -A inet -n -p | grep vpn
udp 0 0 0.0.0.0:1194 0.0.0.0:* 6579/openvpn
# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 10.8.0.0/24 10.66.4.4
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
# ps -e | grep vpn
6579 ? 00:00:00 openvpn
and i got this error from /var/log/syslog:
# cat /var/log/syslog
Mar 10 17:45:51 server openvpn[6579]: 192.168.1.116:1194 Re-using SSL/TLS context
Mar 10 17:45:51 server openvpn[6579]: 192.168.1.116:1194 LZO compression initialized
Mar 10 17:45:54 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:45:58 server openvpn[6579]: 192.168.1.116:1194 write UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:00 server openvpn[6579]: read UDPv4 [ECONNREFUSED|ECONNREFUSED|ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:01 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:06 server last message repeated 3 times
Mar 10 17:46:08 server openvpn[6579]: read UDPv4 [ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:11 server last message repeated 2 times
Mar 10 17:46:21 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:22 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:24 server openvpn[6579]: read UDPv4 [ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:25 server openvpn[6579]: read UDPv4 [ECONNREFUSED|ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:27 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:28 server openvpn[6579]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Mar 10 17:46:52 server openvpn[6579]: 192.168.1.116:1194 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mar 10 17:46:52 server openvpn[6579]: 192.168.1.116:1194 TLS Error: TLS handshake failed
