lucbzh
After few weeks trying to install OpenVPN and reading posting I am lost. Here is my situation.
OpenVPN server OS: windows 2003 server, config file:
port 11943
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key" # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route xxx.zzz.vvv.0 255.255.255.0" # This is my server side private network
client-to-client
keepalive 10 120
comp-lzo
max-clients 2
persist-key
persist-tun
status openvpn-status.log
verb 3
Client OS Windows XP, Config file:
client
dev tun
proto udp
remote lll.uuu.yyy.62 11943 # This is my public router IP on the server side
resolv-retry infinite
nobind
persist-key
persist-tun
push "route hhh.jjj.ddd.0 255.255.255.0" # This is my private LAN on the client side.
ca "C:\\Program Files\\OpenVPN\\LJL\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\LJL\\ljl.crt"
key "C:\\Program Files\\OpenVPN\\LJL\\ljl.key"
ns-cert-type server
comp-lzo
verb 3
The client side router log I get:
Outgoing Log: clientPrivateIP to routerServerPublicIP:11943 is accepted
Incoming Log: routerServerPublicIP from wan to port 1727 is accepted
The server side router log I get:
Incoming Log: Mar 6 13:18:03 - [Access Log ACL-1] Allow UDP Packet - routerClientPublicIP:1727 --> serverOVPNPrivateIP:11943
Outgoing Log: Mar 6 13:18:03 - [Access Log] UDP Packet - serverOVPNPrivateIP:11943 --> clientRouterPublicIP:1727
On both side Windows firewall exceptions: openvpn.exe enabled.
On the client side with the firewall on or off, I have the same problem.
The error message I get is TLS Error: TLS handshake failed.
Thank you for your help. :mrgreen:
lucbzh
Thank you for the fast reply. 🙂
From the client side using verb 4.
Thu Mar 06 16:08:04 2014 us=734375 tun_ipv6 = DISABLED
Thu Mar 06 16:08:04 2014 us=734375 ifconfig_local = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=734375 ifconfig_remote_netmask = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=734375 ifconfig_noexec = DISABLED
Thu Mar 06 16:08:04 2014 us=734375 ifconfig_nowarn = DISABLED
Thu Mar 06 16:08:04 2014 us=734375 ifconfig_ipv6_local = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=750000 ifconfig_ipv6_netbits = 0
Thu Mar 06 16:08:04 2014 us=750000 ifconfig_ipv6_remote = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=750000 shaper = 0
Thu Mar 06 16:08:04 2014 us=750000 mtu_test = 0
Thu Mar 06 16:08:04 2014 us=750000 mlock = DISABLED
Thu Mar 06 16:08:04 2014 us=750000 keepalive_ping = 0
Thu Mar 06 16:08:04 2014 us=750000 keepalive_timeout = 0
Thu Mar 06 16:08:04 2014 us=750000 inactivity_timeout = 0
Thu Mar 06 16:08:04 2014 us=750000 ping_send_timeout = 0
Thu Mar 06 16:08:04 2014 us=750000 ping_rec_timeout = 0
Thu Mar 06 16:08:04 2014 us=765625 ping_rec_timeout_action = 0
Thu Mar 06 16:08:04 2014 us=765625 ping_timer_remote = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 remap_sigusr1 = 0
Thu Mar 06 16:08:04 2014 us=765625 persist_tun = ENABLED
Thu Mar 06 16:08:04 2014 us=765625 persist_local_ip = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 persist_remote_ip = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 persist_key = ENABLED
Thu Mar 06 16:08:04 2014 us=765625 passtos = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 resolve_retry_seconds = 1000000000
Thu Mar 06 16:08:04 2014 us=765625 username = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 groupname = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 chroot_dir = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 cd_dir = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 writepid = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 up_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 down_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=765625 down_pre = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 up_restart = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 up_delay = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 daemon = DISABLED
Thu Mar 06 16:08:04 2014 us=765625 inetd = 0
Thu Mar 06 16:08:04 2014 us=765625 log = DISABLED
Thu Mar 06 16:08:04 2014 us=781250 suppress_timestamps = DISABLED
Thu Mar 06 16:08:04 2014 us=781250 nice = 0
Thu Mar 06 16:08:04 2014 us=781250 verbosity = 4
Thu Mar 06 16:08:04 2014 us=781250 mute = 0
Thu Mar 06 16:08:04 2014 us=781250 status_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=781250 status_file_version = 1
Thu Mar 06 16:08:04 2014 us=781250 status_file_update_freq = 60
Thu Mar 06 16:08:04 2014 us=781250 occ = ENABLED
Thu Mar 06 16:08:04 2014 us=781250 rcvbuf = 0
Thu Mar 06 16:08:04 2014 us=781250 sndbuf = 0
Thu Mar 06 16:08:04 2014 us=781250 sockflags = 0
Thu Mar 06 16:08:04 2014 us=781250 fast_io = DISABLED
Thu Mar 06 16:08:04 2014 us=781250 lzo = 7
Thu Mar 06 16:08:04 2014 us=781250 route_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=781250 route_default_gateway = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=781250 route_default_metric = 0
Thu Mar 06 16:08:04 2014 us=781250 route_noexec = DISABLED
Thu Mar 06 16:08:04 2014 us=781250 route_delay = 5
Thu Mar 06 16:08:04 2014 us=781250 route_delay_window = 30
Thu Mar 06 16:08:04 2014 us=781250 route_delay_defined = ENABLED
Thu Mar 06 16:08:04 2014 us=781250 route_nopull = DISABLED
Thu Mar 06 16:08:04 2014 us=781250 route_gateway_via_dhcp = DISABLED
Thu Mar 06 16:08:04 2014 us=796875 max_routes = 100
Thu Mar 06 16:08:04 2014 us=796875 allow_pull_fqdn = DISABLED
Thu Mar 06 16:08:04 2014 us=796875 management_addr = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 management_port = 0
Thu Mar 06 16:08:04 2014 us=796875 management_user_pass = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 management_log_history_cache = 250
Thu Mar 06 16:08:04 2014 us=796875 management_echo_buffer_size = 100
Thu Mar 06 16:08:04 2014 us=796875 management_write_peer_info_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 management_client_user = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 management_client_group = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 management_flags = 0
Thu Mar 06 16:08:04 2014 us=796875 shared_secret_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=796875 key_direction = 0
Thu Mar 06 16:08:04 2014 us=796875 ciphername_defined = ENABLED
Thu Mar 06 16:08:04 2014 us=796875 ciphername = 'BF-CBC'
Thu Mar 06 16:08:04 2014 us=796875 authname_defined = ENABLED
Thu Mar 06 16:08:04 2014 us=796875 authname = 'SHA1'
Thu Mar 06 16:08:04 2014 us=796875 prng_hash = 'SHA1'
Thu Mar 06 16:08:04 2014 us=796875 prng_nonce_secret_len = 16
Thu Mar 06 16:08:04 2014 us=812500 keysize = 0
Thu Mar 06 16:08:04 2014 us=812500 engine = DISABLED
Thu Mar 06 16:08:04 2014 us=812500 replay = ENABLED
Thu Mar 06 16:08:04 2014 us=812500 mute_replay_warnings = DISABLED
Thu Mar 06 16:08:04 2014 us=812500 replay_window = 64
Thu Mar 06 16:08:04 2014 us=812500 replay_time = 15
Thu Mar 06 16:08:04 2014 us=812500 packet_id_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=812500 use_iv = ENABLED
Thu Mar 06 16:08:04 2014 us=812500 test_crypto = DISABLED
Thu Mar 06 16:08:04 2014 us=812500 tls_server = DISABLED
Thu Mar 06 16:08:04 2014 us=812500 tls_client = ENABLED
Thu Mar 06 16:08:04 2014 us=812500 key_method = 2
Thu Mar 06 16:08:04 2014 us=812500 ca_file = 'C:\Program Files\OpenVPN\LJL\ca.crt'
Thu Mar 06 16:08:04 2014 us=812500 ca_path = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=812500 dh_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=812500 cert_file = 'C:\Program Files\OpenVPN\LJL\ljl.crt'
Thu Mar 06 16:08:04 2014 us=812500 priv_key_file = 'C:\Program Files\OpenVPN\LJL\ljl.key'
Thu Mar 06 16:08:04 2014 us=828125 pkcs12_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 cryptoapi_cert = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 cipher_list = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 tls_verify = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 tls_export_cert = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 verify_x509_type = 0
Thu Mar 06 16:08:04 2014 us=828125 verify_x509_name = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 crl_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=828125 ns_cert_type = 1
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=828125 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=843750 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=843750 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=843750 remote_cert_ku[i] = 0
Thu Mar 06 16:08:04 2014 us=843750 remote_cert_eku = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=843750 ssl_flags = 0
Thu Mar 06 16:08:04 2014 us=843750 tls_timeout = 2
Thu Mar 06 16:08:04 2014 us=843750 renegotiate_bytes = 0
Thu Mar 06 16:08:04 2014 us=843750 renegotiate_packets = 0
Thu Mar 06 16:08:04 2014 us=843750 renegotiate_seconds = 3600
Thu Mar 06 16:08:04 2014 us=843750 handshake_window = 60
Thu Mar 06 16:08:04 2014 us=843750 transition_window = 3600
Thu Mar 06 16:08:04 2014 us=843750 single_session = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 push_peer_info = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 tls_exit = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 tls_auth_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=843750 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=843750 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_protected_authentication = DISABLED
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=859375 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_private_mode = 00000000
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=875000 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_cert_private = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_pin_cache_period = -1
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_id = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=890625 pkcs11_id_management = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 server_network = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 server_netmask = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 server_network_ipv6 = üó"
Thu Mar 06 16:08:04 2014 us=890625 server_netbits_ipv6 = 0
Thu Mar 06 16:08:04 2014 us=890625 server_bridge_ip = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 server_bridge_netmask = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 server_bridge_pool_start = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 server_bridge_pool_end = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 push_entry = 'route 192.168.5.25 255.255.255.0'
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_defined = DISABLED
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_start = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_end = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_netmask = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=890625 ifconfig_pool_persist_refresh_freq = 600
Thu Mar 06 16:08:04 2014 us=906250 ifconfig_ipv6_pool_defined = DISABLED
Thu Mar 06 16:08:04 2014 us=906250 ifconfig_ipv6_pool_base = üó"
Thu Mar 06 16:08:04 2014 us=906250 ifconfig_ipv6_pool_netbits = 0
Thu Mar 06 16:08:04 2014 us=906250 n_bcast_buf = 256
Thu Mar 06 16:08:04 2014 us=906250 tcp_queue_limit = 64
Thu Mar 06 16:08:04 2014 us=906250 real_hash_size = 256
Thu Mar 06 16:08:04 2014 us=906250 virtual_hash_size = 256
Thu Mar 06 16:08:04 2014 us=906250 client_connect_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=906250 learn_address_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=906250 client_disconnect_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=906250 client_config_dir = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=906250 ccd_exclusive = DISABLED
Thu Mar 06 16:08:04 2014 us=906250 tmp_dir = 'C:\DOCUME~1\Lucl\LOCALS~1\Temp\'
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_defined = DISABLED
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_local = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_remote_netmask = 0.0.0.0
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_ipv6_defined = DISABLED
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_ipv6_local = üó"/0
Thu Mar 06 16:08:04 2014 us=906250 push_ifconfig_ipv6_remote = üó"
Thu Mar 06 16:08:04 2014 us=921875 enable_c2c = DISABLED
Thu Mar 06 16:08:04 2014 us=921875 duplicate_cn = DISABLED
Thu Mar 06 16:08:04 2014 us=921875 cf_max = 0
Thu Mar 06 16:08:04 2014 us=921875 cf_per = 0
Thu Mar 06 16:08:04 2014 us=921875 max_clients = 1024
Thu Mar 06 16:08:04 2014 us=921875 max_routes_per_client = 256
Thu Mar 06 16:08:04 2014 us=921875 auth_user_pass_verify_script = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=921875 auth_user_pass_verify_script_via_file = DISABLED
Thu Mar 06 16:08:04 2014 us=921875 client = ENABLED
Thu Mar 06 16:08:04 2014 us=921875 pull = ENABLED
Thu Mar 06 16:08:04 2014 us=921875 auth_user_pass_file = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=921875 show_net_up = DISABLED
Thu Mar 06 16:08:04 2014 us=921875 route_method = 0
Thu Mar 06 16:08:04 2014 us=921875 ip_win32_defined = DISABLED
Thu Mar 06 16:08:04 2014 us=921875 ip_win32_type = 3
Thu Mar 06 16:08:04 2014 us=921875 dhcp_masq_offset = 0
Thu Mar 06 16:08:04 2014 us=921875 dhcp_lease_time = 31536000
Thu Mar 06 16:08:04 2014 us=921875 tap_sleep = 0
Thu Mar 06 16:08:04 2014 us=921875 dhcp_options = DISABLED
Thu Mar 06 16:08:04 2014 us=937500 dhcp_renew = DISABLED
Thu Mar 06 16:08:04 2014 us=937500 dhcp_pre_release = DISABLED
Thu Mar 06 16:08:04 2014 us=937500 dhcp_release = DISABLED
Thu Mar 06 16:08:04 2014 us=937500 domain = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=937500 netbios_scope = '[UNDEF]'
Thu Mar 06 16:08:04 2014 us=937500 netbios_node_type = 0
Thu Mar 06 16:08:04 2014 us=937500 disable_nbt = DISABLED
Thu Mar 06 16:08:04 2014 us=937500 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Mar 06 16:08:05 2014 us=15625 LZO compression initialized
Thu Mar 06 16:08:05 2014 us=15625 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Mar 06 16:08:05 2014 us=15625 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Mar 06 16:08:05 2014 us=15625 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Mar 06 16:08:05 2014 us=15625 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 06 16:08:05 2014 us=15625 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 06 16:08:05 2014 us=15625 Local Options hash (VER=V4): '41690919'
Thu Mar 06 16:08:05 2014 us=15625 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 06 16:08:05 2014 us=15625 UDPv4 link local: [undef]
Thu Mar 06 16:08:05 2014 us=15625 UDPv4 link remote: [AF_INET]216.12.81.62:11943
Thu Mar 06 16:09:05 2014 us=890625 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 06 16:09:05 2014 us=890625 TLS Error: TLS handshake failed
Thu Mar 06 16:09:05 2014 us=890625 TCP/UDP: Closing socket
Thu Mar 06 16:09:05 2014 us=890625 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 06 16:09:05 2014 us=890625 Restart pause, 2 second(s)
lucbzh
Yes, I know that I used port 11943 (one blog suggested to use this one due to windows hogging ports.).
What do you recommend me to check on my network.
The two routers show the traffic in and out.
Did I set the proper push route in the server and client config files?
Thank you for the help.
Luc
lucbzh
Thank you, I will do this later to day.
lucbzh
Fixed my connection, in the client config the server ip was wrong. Found it with the server router outgoing log.
Now I am getting this error: read UPDv4: Connection reset by peer (WSAECONNRESET) (code = 10054)
What is my problem now? Server os windows server 2003.
lucbzh
I fixed my problem by changing udp to tcp. Now I am connected to my server, can ping it from the client.
My new problem is that I do not see my private network. But this is an other question for an other post. Tank you for responding to my question.
