TLS Error: TLS Key Negotiation Failed To Occurd Within 60s

albrethsen26

Hi,

I'm trying to set up a VPN server, and am running into some issues. On the server, I can connect to the VPN successfully. Let me first say that I have set up the port forward on my router, made a firewall rule on the server (Even tried disabling the firewall, and disabled anti-virus). On the client, I get the following messages :

Fri Apr 11 12:34:48 2014 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
Fri Apr 11 12:34:48 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 11 12:34:48 2014 LZO compression initialized
Fri Apr 11 12:34:48 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 11 12:34:48 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Apr 11 12:34:48 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 11 12:34:48 2014 Local Options hash (VER=V4): '41690919'
Fri Apr 11 12:34:48 2014 Expected Remote Options hash (VER=V4): '530fdded'
Fri Apr 11 12:34:48 2014 UDPv4 link local: [undef]
Fri Apr 11 12:34:48 2014 UDPv4 link remote: 50.203.2.30:1194
Fri Apr 11 12:35:48 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Apr 11 12:35:48 2014 TLS Error: TLS handshake failed
Fri Apr 11 12:35:48 2014 TCP/UDP: Closing socket
Fri Apr 11 12:35:48 2014 SIGUSR1[soft,tls-error] received, process restarting
Fri Apr 11 12:35:48 2014 Restart pause, 2 second(s)
Fri Apr 11 12:35:50 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 11 12:35:50 2014 Re-using SSL/TLS context
Fri Apr 11 12:35:50 2014 LZO compression initialized
Fri Apr 11 12:35:50 2014 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 11 12:35:50 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Apr 11 12:35:50 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 11 12:35:50 2014 Local Options hash (VER=V4): '41690919'
Fri Apr 11 12:35:50 2014 Expected Remote Options hash (VER=V4): '530fdded'
Fri Apr 11 12:35:50 2014 UDPv4 link local: [undef]
Fri Apr 11 12:35:50 2014 UDPv4 link remote: 50.203.2.30:1194

Here is my config file for the server:

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\server.crt"
key "C:\\Program Files\\OpenVPN\\config\\server.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120

comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

And here is my config file for my client:

client
dev tun
proto udp
remote x.x.2.30 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\pete.crt"
key "C:\\Program Files\\OpenVPN\\config\\pete.key"
ns-cert-type server
comp-lzo
verb 3

any help is greatly appreciated!

albrethsen26

Mon Apr 14 13:30:19 2014 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010
Mon Apr 14 13:30:19 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 14 13:30:20 2014 Diffie-Hellman initialized with 1024 bit key
Mon Apr 14 13:30:20 2014 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Apr 14 13:30:20 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Apr 14 13:30:20 2014 ROUTE default_gateway=10.0.0.1
Mon Apr 14 13:30:20 2014 TAP-WIN32 device [Local Area Connection 9] opened: \\.\Global\{4D53D4D1-BC7B-4284-A4AD-304184AB5628}.tap
Mon Apr 14 13:30:20 2014 TAP-Win32 Driver Version 9.7
Mon Apr 14 13:30:20 2014 TAP-Win32 MTU=1500
Mon Apr 14 13:30:20 2014 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {4D53D4D1-BC7B-4284-A4AD-304184AB5628} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Mon Apr 14 13:30:20 2014 Sleeping for 10 seconds...
Mon Apr 14 13:30:30 2014 Successful ARP Flush on interface [24] {4D53D4D1-BC7B-4284-A4AD-304184AB5628}
Mon Apr 14 13:30:30 2014 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Mon Apr 14 13:30:30 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Apr 14 13:30:30 2014 Route addition via IPAPI succeeded [adaptive]
Mon Apr 14 13:30:30 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 14 13:30:30 2014 UDPv4 link local (bound): [undef]:1194
Mon Apr 14 13:30:30 2014 UDPv4 link remote: [undef]
Mon Apr 14 13:30:30 2014 MULTI: multi_init called, r=256 v=256
Mon Apr 14 13:30:30 2014 IFCONFIG POOL: base=10.8.0.4 size=62
Mon Apr 14 13:30:30 2014 IFCONFIG POOL LIST
Mon Apr 14 13:30:30 2014 pete,10.8.0.4
Mon Apr 14 13:30:30 2014 Initialization Sequence Completed

albrethsen26

I can successfully connect using "pete" config, when it is on the same server as the server config. But when I move "pete" client to a computer outside the network and change the IP address to the server's external IP, it returns the errors mentioned in my first post.