TLS Error on server side

Joris

Hello,

First, please excuse my poor english, I'm french, and I'm not so good with foreign languages...

Here is my problem :
I have multiple OpenVPN server working fine from several years.
I have multiple clients connecting to all servers.
I want to replace an existent client by another computer, which is connected on another network, in another location, but with the same certificate. So, I've copied all the config files and certificate/key files from my old computer to the new one.

Problem is : on the new computer, all OpenVPN connections are ok, except one.

I don't understand why : the server is still accepting connections from others clients, and the client can connect to other servers, but this client can't connect on this server !

Here is the client log (a part of it) :

Tue Feb 04 11:36:34 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Feb 04 11:36:34 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Feb 04 11:36:34 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 04 11:36:34 2014 LZO compression initialized
Tue Feb 04 11:36:34 2014 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 11:36:34 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 04 11:36:34 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 11:36:34 2014 Local Options hash (VER=V4): 'd79ca330'
Tue Feb 04 11:36:34 2014 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 11:36:34 2014 UDPv4 link local: [undef]
Tue Feb 04 11:36:34 2014 UDPv4 link remote: XXX.XXX.XXX.XXX:1194
Tue Feb 04 11:37:34 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 11:37:34 2014 TLS Error: TLS handshake failed
Tue Feb 04 11:37:34 2014 TCP/UDP: Closing socket
Tue Feb 04 11:37:34 2014 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 04 11:37:34 2014 Restart pause, 2 second(s)

And the server log :

Tue Feb 04 11:23:59 2014 MULTI: multi_create_instance called
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 Re-using SSL/TLS context
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 LZO compression initialized
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 11:23:59 2014 YYY.YYY.YYY.YYY:60247 TLS: Initial packet from YYY.YYY.YYY.YYY:60247, sid=3a8bf889 14b5f31b
Tue Feb 04 11:24:18 2014 YYY.YYY.YYY.YYY:58973 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 11:24:18 2014 YYY.YYY.YYY.YYY:58973 TLS Error: TLS handshake failed
Tue Feb 04 11:24:18 2014 YYY.YYY.YYY.YYY:58973 SIGUSR1[soft,tls-error] received, client-instance restarting

Firewalls seem ok on both client and server sides, and we logs show us that the server see an inbound connection from my client, so I don't understand what is happening, and I beg for your help...

Thanks a lot !

Joris

Joris

Hello,

Here is my client's config file (this is the exact same that on my old computers) :

client
dev tap
dev-node OpenVPN_tbg
proto udp
remote XXX.XXX.XXX.XXX 1194
nobind
persist-key
persist-tun
ca tbg\\ca.crt
cert tbg\\so4.crt
key tbg\\so4.key
comp-lzo
verb 3

And the server's one :

tls-server
port 1194
proto udp
dev tap
dev-node OpenVPN
ca ca.crt
cert server.crt
key server.key 
dh dh1024.pem
server-bridge 10.10.4.1 255.255.255.0 10.10.4.11 10.10.4.100
keepalive 1 20
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
management localhost 23

The complete log of the client after one minute :

Tue Feb 04 14:20:28 2014 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue Feb 04 14:20:28 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Feb 04 14:20:28 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 04 14:20:29 2014 LZO compression initialized
Tue Feb 04 14:20:29 2014 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:20:29 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 04 14:20:29 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:20:29 2014 Local Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:20:29 2014 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:20:29 2014 UDPv4 link local: [undef]
Tue Feb 04 14:20:29 2014 UDPv4 link remote: XXX.XXX.XXX.XXX:1194
Tue Feb 04 14:21:29 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 14:21:29 2014 TLS Error: TLS handshake failed
Tue Feb 04 14:21:29 2014 TCP/UDP: Closing socket
Tue Feb 04 14:21:29 2014 SIGUSR1[soft,tls-error] received, process restarting
Tue Feb 04 14:21:29 2014 Restart pause, 2 second(s)
Tue Feb 04 14:21:31 2014 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Feb 04 14:21:31 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 04 14:21:31 2014 Re-using SSL/TLS context
Tue Feb 04 14:21:31 2014 LZO compression initialized
Tue Feb 04 14:21:31 2014 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:21:31 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 04 14:21:31 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:21:31 2014 Local Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:21:31 2014 Expected Remote Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:21:31 2014 UDPv4 link local: [undef]
Tue Feb 04 14:21:31 2014 UDPv4 link remote: XXX.XXX.XXX.XXX:1194

And the server's complete log after the same time :

Tue Feb 04 14:19:35 2014 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov  8 2010
Tue Feb 04 14:19:35 2014 MANAGEMENT: TCP Socket listening on 127.0.0.1:23
Tue Feb 04 14:19:35 2014 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Feb 04 14:19:35 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Feb 04 14:19:35 2014 Diffie-Hellman initialized with 1024 bit key
Tue Feb 04 14:19:35 2014 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:35 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Feb 04 14:19:35 2014 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{19878DDF-D1F8-4B8D-BA26-B879F39BF801}.tap
Tue Feb 04 14:19:35 2014 TAP-Win32 Driver Version 9.7 
Tue Feb 04 14:19:35 2014 TAP-Win32 MTU=1500
Tue Feb 04 14:19:35 2014 Sleeping for 10 seconds...
Tue Feb 04 14:19:45 2014 Successful ARP Flush on interface [17] {19878DDF-D1F8-4B8D-BA26-B879F39BF801}
Tue Feb 04 14:19:45 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:45 2014 UDPv4 link local (bound): [undef]:1194
Tue Feb 04 14:19:45 2014 UDPv4 link remote: [undef]
Tue Feb 04 14:19:45 2014 MULTI: multi_init called, r=256 v=256
Tue Feb 04 14:19:45 2014 IFCONFIG POOL: base=10.10.4.11 size=90
Tue Feb 04 14:19:45 2014 Initialization Sequence Completed
Tue Feb 04 14:19:45 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 Re-using SSL/TLS context
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 LZO compression initialized
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:45 2014 YYY.YYY.YYY.YYY:60133 TLS: Initial packet from YYY.YYY.YYY.YYY:60133, sid=8eedc7e7 d78c6cfa
Tue Feb 04 14:19:52 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 Re-using SSL/TLS context
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 LZO compression initialized
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:52 2014 YYY.YYY.YYY.YYY:63816 TLS: Initial packet from YYY.YYY.YYY.YYY:63816, sid=c0594cf1 531ad711
Tue Feb 04 14:19:56 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Re-using SSL/TLS context
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 LZO compression initialized
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 TLS: Initial packet from ZZZ.ZZZ.ZZZ.ZZZ:1362, sid=4cd2fb1c f71778c7
Tue Feb 04 14:19:56 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Re-using SSL/TLS context
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 LZO compression initialized
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 TLS: Initial packet from ZZZ.ZZZ.ZZZ.ZZZ:1164, sid=269ae0a8 860ffb5a
Tue Feb 04 14:19:56 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Re-using SSL/TLS context
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 LZO compression initialized
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:56 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 TLS: Initial packet from ZZZ.ZZZ.ZZZ.ZZZ:1107, sid=54568524 4e54a757
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 VERIFY OK: depth=1, /C=FR/ST=38/L=Grenoble/O=SPTBG/CN=SBG1/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 VERIFY OK: depth=0, /C=FR/ST=38/O=SPTBG/CN=web/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 VERIFY OK: depth=1, /C=FR/ST=38/L=Grenoble/O=SPTBG/CN=SBG1/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 VERIFY OK: depth=0, /C=FR/ST=38/O=SPTBG/CN=so3/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 VERIFY OK: depth=1, /C=FR/ST=38/L=Grenoble/O=SPTBG/CN=SBG1/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 VERIFY OK: depth=0, /C=FR/ST=38/O=SPTBG/CN=so1/emailAddress=admin.sptbg@orange.fr
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1362 [web] Peer Connection Initiated with ZZZ.ZZZ.ZZZ.ZZZ:1362
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1164 [so3] Peer Connection Initiated with ZZZ.ZZZ.ZZZ.ZZZ:1164
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Feb 04 14:19:57 2014 ZZZ.ZZZ.ZZZ.ZZZ:1107 [so1] Peer Connection Initiated with ZZZ.ZZZ.ZZZ.ZZZ:1107
Tue Feb 04 14:19:58 2014 MULTI: multi_create_instance called
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 Re-using SSL/TLS context
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 LZO compression initialized
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:19:58 2014 YYY.YYY.YYY.YYY:53654 TLS: Initial packet from YYY.YYY.YYY.YYY:53654, sid=f76a99df 5db75b67
Tue Feb 04 14:19:59 2014 so3/ZZZ.ZZZ.ZZZ.ZZZ:1164 PUSH: Received control message: 'PUSH_REQUEST'
Tue Feb 04 14:19:59 2014 so3/ZZZ.ZZZ.ZZZ.ZZZ:1164 SENT CONTROL [so3]: 'PUSH_REPLY,route-gateway 10.10.4.1,ping 1,ping-restart 20,ifconfig 10.10.4.12 255.255.255.0' (status=1)
Tue Feb 04 14:19:59 2014 so1/ZZZ.ZZZ.ZZZ.ZZZ:1107 PUSH: Received control message: 'PUSH_REQUEST'
Tue Feb 04 14:19:59 2014 so1/ZZZ.ZZZ.ZZZ.ZZZ:1107 SENT CONTROL [so1]: 'PUSH_REPLY,route-gateway 10.10.4.1,ping 1,ping-restart 20,ifconfig 10.10.4.13 255.255.255.0' (status=1)
Tue Feb 04 14:19:59 2014 web/ZZZ.ZZZ.ZZZ.ZZZ:1362 PUSH: Received control message: 'PUSH_REQUEST'
Tue Feb 04 14:19:59 2014 web/ZZZ.ZZZ.ZZZ.ZZZ:1362 SENT CONTROL [web]: 'PUSH_REPLY,route-gateway 10.10.4.1,ping 1,ping-restart 20,ifconfig 10.10.4.11 255.255.255.0' (status=1)
Tue Feb 04 14:20:00 2014 so3/ZZZ.ZZZ.ZZZ.ZZZ:1164 MULTI: Learn: 00:ff:82:f4:d4:03 -> so3/ZZZ.ZZZ.ZZZ.ZZZ:1164
Tue Feb 04 14:20:01 2014 web/ZZZ.ZZZ.ZZZ.ZZZ:1362 MULTI: Learn: 00:ff:54:8f:d1:e3 -> web/ZZZ.ZZZ.ZZZ.ZZZ:1362
Tue Feb 04 14:20:01 2014 so1/ZZZ.ZZZ.ZZZ.ZZZ:1107 MULTI: Learn: 00:ff:29:d8:4d:68 -> so1/ZZZ.ZZZ.ZZZ.ZZZ:1107
Tue Feb 04 14:20:43 2014 MULTI: multi_create_instance called
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 Re-using SSL/TLS context
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 LZO compression initialized
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:20:43 2014 YYY.YYY.YYY.YYY:62565 TLS: Initial packet from YYY.YYY.YYY.YYY:62565, sid=a3c87179 2c014209
Tue Feb 04 14:20:46 2014 YYY.YYY.YYY.YYY:60133 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 14:20:46 2014 YYY.YYY.YYY.YYY:60133 TLS Error: TLS handshake failed
Tue Feb 04 14:20:46 2014 YYY.YYY.YYY.YYY:60133 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Feb 04 14:20:52 2014 YYY.YYY.YYY.YYY:63816 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 14:20:52 2014 YYY.YYY.YYY.YYY:63816 TLS Error: TLS handshake failed
Tue Feb 04 14:20:52 2014 YYY.YYY.YYY.YYY:63816 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Feb 04 14:20:54 2014 MULTI: multi_create_instance called
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 Re-using SSL/TLS context
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 LZO compression initialized
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 Local Options hash (VER=V4): 'f7df56b8'
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 Expected Remote Options hash (VER=V4): 'd79ca330'
Tue Feb 04 14:20:54 2014 YYY.YYY.YYY.YYY:55130 TLS: Initial packet from YYY.YYY.YYY.YYY:55130, sid=27577ea5 74d46f59
Tue Feb 04 14:20:58 2014 YYY.YYY.YYY.YYY:53654 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 04 14:20:58 2014 YYY.YYY.YYY.YYY:53654 TLS Error: TLS handshake failed
Tue Feb 04 14:20:58 2014 YYY.YYY.YYY.YYY:53654 SIGUSR1[soft,tls-error] received, client-instance restarting

XXX.XXX.XXX.XXX is the public IP address of my server, YYY.YYY.YYY.YYY is the one used by my new computers, and ZZZ.ZZZ.ZZZ.ZZZ is the IP used by the working computers.

I thinked that my new network could be the source of the problem, but since the connexion works with other servers, it can't be that.
And my server's firewall is well configured since other clients can connect.

Thanks,

Joris

Joris

Hello,

So I've updated OpenVPN on my server to the 2.3.2 64 bits version, but the problem remain exactly the same.

Do you have any ID of what I've got to do to make it works ?

Thanks,

Joris