TLS Error: TLS key negotiation failed to occur within 60 sec

angela

Hi,

I have some problems with bandwith.
OpenVPN 2.3.2 is built on CentOS6.5.
It can run normal on the Internet.
But, when I am run on the 6LowPAN, which is ATAVRRZRAVEN 2.4 GHz. http://www.digikey.com/product-etail/en/ATAVRRZRAVEN/ATAVRRZRAVEN-ND/1812221
It will too long to run. It was time.
I think the time of transmission is too long.
I do not know how to fix it.
Thanks in advance.

--------------------------------------------------------------------------------------------------------------------------------------------
The error message
--------------------------------------------------------------------------------------------------------------------------------------------
Fri Apr 11 18:22:06 2014 OpenVPN 2.3.2 i686-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Fri Apr 11 18:22:06 2014 Socket Buffers: R=[112640->131072] S=[112640->131072]
Fri Apr 11 18:22:06 2014 UDPv6 link local: [undef]
Fri Apr 11 18:22:06 2014 UDPv6 link remote: [AF_INET6]aaaa::2:1194
Fri Apr 11 18:22:07 2014 TLS: Initial packet from [AF_INET6]aaaa::2:1194, sid=ac09c26e b3095388
Fri Apr 11 18:22:33 2014 VERIFY OK: depth=1, C=TW, ST=Nantou County, L=Puli Township, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 18:22:33 2014 VERIFY OK: nsCertType=SERVER
Fri Apr 11 18:22:33 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 18:23:06 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Apr 11 18:23:06 2014 TLS Error: TLS handshake failed
Fri Apr 11 18:23:06 2014 SIGUSR1[soft,tls-error] received, process restarting

--------------------------------------------------------------------------------------------------------------------------------------------
My server.conf
--------------------------------------------------------------------------------------------------------------------------------------------
port 1194
proto udp6
dev tun0
tun-ipv6
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

--------------------------------------------------------------------------------------------------------------------------------------------
My client.conf
--------------------------------------------------------------------------------------------------------------------------------------------
client
dev tun
tun-ipv6
proto udp6
remote aaaa::2 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3

angela

angela wroteHi,

I have some problems with bandwith.
OpenVPN 2.3.2 is built on CentOS6.5.
It can run normal on the Internet.
But, when I am run on the 6LowPAN, which is ATAVRRZRAVEN 2.4 GHz. http://www.digikey.com/product-etail/en/ATAVRRZRAVEN/ATAVRRZRAVEN-ND/1812221
It will too long to run. It was time.
I think the time of transmission is too long.
I do not know how to fix it.
Thanks in advance.

--------------------------------------------------------------------------------------------------------------------------------------------
The error message
--------------------------------------------------------------------------------------------------------------------------------------------
Fri Apr 11 18:22:06 2014 OpenVPN 2.3.2 i686-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Fri Apr 11 18:22:06 2014 Socket Buffers: R=[112640->131072] S=[112640->131072]
Fri Apr 11 18:22:06 2014 UDPv6 link local: [undef]
Fri Apr 11 18:22:06 2014 UDPv6 link remote: [AF_INET6]aaaa::2:1194
Fri Apr 11 18:22:07 2014 TLS: Initial packet from [AF_INET6]aaaa::2:1194, sid=ac09c26e b3095388
Fri Apr 11 18:22:33 2014 VERIFY OK: depth=1, C=TW, ST=Nantou County, L=Puli Township, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 18:22:33 2014 VERIFY OK: nsCertType=SERVER
Fri Apr 11 18:22:33 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 18:23:06 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Apr 11 18:23:06 2014 TLS Error: TLS handshake failed
Fri Apr 11 18:23:06 2014 SIGUSR1[soft,tls-error] received, process restarting

--------------------------------------------------------------------------------------------------------------------------------------------
My server.conf
--------------------------------------------------------------------------------------------------------------------------------------------
port 1194
proto udp6
dev tun0
tun-ipv6
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3

--------------------------------------------------------------------------------------------------------------------------------------------
My client.conf
--------------------------------------------------------------------------------------------------------------------------------------------
client
dev tun
tun-ipv6
proto udp6
remote aaaa::2 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3

angela

yes
In this interface, it is only have ipv6
Thanks for you answering

angela

It is seem if only have IPv6 is ok

----------------------------------------------------------------------------------------------------------------------------------------------
This is my server ifconfig
----------------------------------------------------------------------------------------------------------------------------------------------
eth1 Link encap:Ethernet HWaddr 08:00:27:9F:0E:17
inet6 addr: 2001:e10:6840:21:a00:27ff:fe9f:e17/64 Scope:Global
inet6 addr: fe80::a00:27ff:fe9f:e17/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:17694 errors:0 dropped:0 overruns:0 frame:0
TX packets:218 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1447027 (1.3 MiB) TX bytes:28420 (27.7 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

--------------------------------------------------------------------------------------------------------------------------------------------
client ifconfig
--------------------------------------------------------------------------------------------------------------------------------------------
eth1 Link encap:Ethernet HWaddr 08:00:27:53:43:B4
inet6 addr: 2001:e10:6840:21:a00:27ff:fe53:43b4/64 Scope:Global
inet6 addr: fe80::a00:27ff:fe53:43b4/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4434 errors:0 dropped:0 overruns:0 frame:0
TX packets:169 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:371844 (363.1 KiB) TX bytes:22011 (21.4 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

--------------------------------------------------------------------------------------------------------------------------------------------
run message
--------------------------------------------------------------------------------------------------------------------------------------------
Fri Apr 11 22:29:46 2014 OpenVPN 2.3.2 i686-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Fri Apr 11 22:29:46 2014 Socket Buffers: R=[112640->131072] S=[112640->131072]
Fri Apr 11 22:29:46 2014 UDPv6 link local: [undef]
Fri Apr 11 22:29:46 2014 UDPv6 link remote: [AF_INET6]2001:e10:6840:21:a00:27ff:fe9f:e17:1194
Fri Apr 11 22:29:46 2014 TLS: Initial packet from [AF_INET6]2001:e10:6840:21:a00:27ff:fe9f:e17:1194, sid=882f3e20 9995aa3d
Fri Apr 11 22:29:46 2014 VERIFY OK: depth=1, C=TW, ST=Nantou County, L=Puli Township, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 22:29:46 2014 VERIFY OK: nsCertType=SERVER
Fri Apr 11 22:29:46 2014 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Fri Apr 11 22:29:46 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 11 22:29:46 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 11 22:29:46 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 11 22:29:46 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 11 22:29:46 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Apr 11 22:29:46 2014 [server] Peer Connection Initiated with [AF_INET6]2001:e10:6840:21:a00:27ff:fe9f:e17:1194
Fri Apr 11 22:29:49 2014 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Apr 11 22:29:49 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Fri Apr 11 22:29:49 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 11 22:29:49 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 11 22:29:49 2014 OPTIONS IMPORT: route options modified
Fri Apr 11 22:29:49 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 11 22:29:49 2014 ROUTE: default_gateway=UNDEF
Fri Apr 11 22:29:49 2014 TUN/TAP device tun0 opened
Fri Apr 11 22:29:49 2014 TUN/TAP TX queue length set to 100
Fri Apr 11 22:29:49 2014 do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
Fri Apr 11 22:29:49 2014 /sbin/ip link set dev tun0 up mtu 1500
Fri Apr 11 22:29:49 2014 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Fri Apr 11 22:29:49 2014 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
Fri Apr 11 22:29:49 2014 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Fri Apr 11 22:29:49 2014 Initialization Sequence Completed