Hi
For some reason (firewall i think) I can't negotiate any TLS connection (As today; before that every thing was fine);
My client's log is:
Sun Dec 22 02:57:30 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Dec 22 02:57:30 2013 Re-using SSL/TLS context
Sun Dec 22 02:57:30 2013 LZO compression initialized
Sun Dec 22 02:57:30 2013 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Dec 22 02:57:30 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sun Dec 22 02:57:30 2013 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Dec 22 02:57:30 2013 Local Options hash (VER=V4): '41690919'
Sun Dec 22 02:57:30 2013 Expected Remote Options hash (VER=V4): '530fdded'
Sun Dec 22 02:57:30 2013 UDPv4 link local: [undef]
Sun Dec 22 02:57:30 2013 UDPv4 link remote: [AF_INET]63.141.233.227:1194
Sun Dec 22 02:57:30 2013 TLS: Initial packet from [AF_INET]63.141.233.227:1194, sid=6b1b1074 77bfd1b9
Sun Dec 22 02:57:51 2013 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Sun Dec 22 02:57:51 2013 VERIFY OK: nsCertType=SERVER
Sun Dec 22 02:57:51 2013 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=server/name=changeme/emailAddress=mail@host.domain
Sun Dec 22 02:58:31 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Dec 22 02:58:31 2013 TLS Error: TLS handshake failed
Sun Dec 22 02:58:31 2013 TCP/UDP: Closing socket
Sun Dec 22 02:58:31 2013 SIGUSR1[soft,tls-error] received, process restarting
Sun Dec 22 02:58:31 2013 Restart pause, 2 second(s)
and my server's log is:
Dec 21 17:44:03 iran-data ovpn-server[2297]: MULTI: multi_create_instance called
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 Re-using SSL/TLS context
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 LZO compression initialized
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 Local Options hash (VER=V4): '530fdded'
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 Expected Remote Options hash (VER=V4): '41690919'
Dec 21 17:44:03 iran-data ovpn-server[2297]: 2.178.143.44:58482 TLS: Initial packet from [AF_INET]2.178.143.44:58482, sid=9ae7570a a98c4fb2
Dec 21 17:44:06 iran-data ovpn-server[2297]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Dec 21 17:44:17 iran-data ovpn-server[2297]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Dec 21 17:44:23 iran-data ovpn-server[2297]: 2.178.143.44:45961 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 21 17:44:23 iran-data ovpn-server[2297]: 2.178.143.44:45961 TLS Error: TLS handshake failed
Dec 21 17:44:23 iran-data ovpn-server[2297]: 2.178.143.44:45961 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 21 17:44:26 iran-data ovpn-server[2297]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
I don't have access to firewalls so I want to configure OpenVPN in a way to not use TLS at all;
How can I disable TLS completely?
