(Modified per post 33633, thanks @debbie10t)
Greetings All,
I've spent a few days troubleshooting this and have run out of ideas, any and all help would be greatly appreciated.
My goal is to have OpenVPN running on my EC2 instance and use it as a personal VPN as needed- server running on an Amazon AWS EC2 instance, client running on my local OS X box (using Viscosity as the client)
I've got an Ubuntu 13.04 server running on an AmazonAWS EC2 instance. I have OpenVPN installed, keys generated, and everything configured. On my local box (running OS X) I am using Viscosity as the wrapper/manager. It is configured as well.
When I try to connect, Viscosity (client) generates the following error:
Oct 01 10:28:44: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Oct 01 10:28:44: UDPv4 link local: [undef]
Oct 01 10:28:44: UDPv4 link remote: [AF_INET]54.221.219.227:1194
Oct 01 10:29:44: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Oct 01 10:29:44: TLS Error: TLS handshake failed
Oct 01 10:29:44: SIGUSR1[soft,tls-error] received, process restarting
I can't quite figure out where I went wrong and the right fix.
Here's my current server.conf:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway"
client-to-client
keepalive 10 120
tls-auth ta.key 0
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
And here's the relevant parts of the syslog:
Oct 1 13:03:29 domU-12-31-39-0F-1C-5E ovpn-server[19554]: Options error: Unrecognized option or missing parameter(s) in /etc/openvpn/server.conf:17: verb (2.2.1)
Oct 1 13:03:29 domU-12-31-39-0F-1C-5E ovpn-server[19554]: Use --help for more information.
Oct 1 13:04:46 domU-12-31-39-0F-1C-5E kernel: [141630.806733] nf_conntrack version 0.5.0 (4717 buckets, 18868 max)
Oct 1 13:04:46 domU-12-31-39-0F-1C-5E kernel: [141630.828692] ip_tables: (C) 2000-2006 Netfilter Core Team
Oct 1 13:17:01 domU-12-31-39-0F-1C-5E CRON[19574]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Oct 1 14:17:01 domU-12-31-39-0F-1C-5E CRON[19954]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Oct 1 14:20:40 domU-12-31-39-0F-1C-5E ovpn-server[19995]: Options error: Unrecognized option or missing parameter(s) in /etc/openvpn/server.conf:18: verb (2.2.1)
Oct 1 14:20:40 domU-12-31-39-0F-1C-5E ovpn-server[19995]: Use --help for more information.
Oct 1 15:17:01 domU-12-31-39-0F-1C-5E CRON[20019]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
Oct 1 16:09:49 domU-12-31-39-0F-1C-5E dhclient: DHCPREQUEST of 10.193.31.172 on eth0 to 169.254.1.0 port 67 (xid=0x45e06fd5)
Oct 1 16:09:49 domU-12-31-39-0F-1C-5E dhclient: DHCPACK of 10.193.31.172 from 10.193.28.163
Oct 1 16:09:49 domU-12-31-39-0F-1C-5E dhclient: bound to 10.193.31.172 -- renewal in 39597 seconds.
Oct 1 16:17:
Here's the configuration from Viscosity (client):
#viscosity startonopen false
#viscosity dhcp true
#viscosity dnssupport true
#viscosity name My Connection
remote 54.221.219.227 1194 udp
persist-key
tls-client
pull
ca ca.crt
redirect-gateway def1
dev tun
persist-tun
cert cert.crt
comp-lzo yes
nobind
key key.key
dhcp-option DNS 8.8.8.8
Based on the above, does anything specific stand out to anyone?
The other thought I had was that I am getting caught/lost somewhere in the NAT'd EC2 realm (i.e. I have both a private and a public IP for the server)...but if there was a problem there, I'd figure I'd hit it when I try to pass traffic through it, not just when I try to connect.
Thanks!
