pincher the same version of Ubuntu openvpn too Sun Apr 20 11:37:17 2014 us=532934 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 13 2014 Sun Apr 20 11:37:17 2014 us=533037 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Sun Apr 20 11:37:17 2014 us=533614 WARNING: file '/etc/openvpn/keys/client1.key' is group or others accessible Sun Apr 20 11:37:17 2014 us=534128 LZO compression initialized Sun Apr 20 11:37:17 2014 us=534206 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sun Apr 20 11:37:17 2014 us=534247 Socket Buffers: R=[212992->131072] S=[212992->131072] Sun Apr 20 11:37:17 2014 us=534268 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sun Apr 20 11:37:17 2014 us=534290 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' Sun Apr 20 11:37:17 2014 us=534301 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' Sun Apr 20 11:37:17 2014 us=534325 Local Options hash (VER=V4): '41690919' Sun Apr 20 11:37:17 2014 us=534342 Expected Remote Options hash (VER=V4): '530fdded' Sun Apr 20 11:37:17 2014 us=535128 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay Sun Apr 20 11:37:17 2014 us=535214 UDPv4 link local: [undef] Sun Apr 20 12:06:17 2014 us=415173 UDPv4 link remote: [AF_INET]ip:35500 Sun Apr 20 12:06:17 2014 us=415207 UDPv4 WRITE [14] to [AF_INET]ip:35500: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Sun Apr 20 12:06:19 2014 us=769726 UDPv4 WRITE [14] to [AF_INET]ip:35500: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Sun Apr 20 12:06:23 2014 us=301343 UDPv4 WRITE [14] to [AF_INET]ip:35500: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Sun Apr 20 12:06:31 2014 us=628691 UDPv4 WRITE [14] to [AF_INET]ip:35500: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Sun Apr 20 12:06:47 2014 us=674682 UDPv4 WRITE [14] to [AF_INET]ip:35500: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0 Sun Apr 20 12:07:17 2014 us=235982 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Sun Apr 20 12:07:17 2014 us=236037 TLS Error: TLS handshake failed iptables server /etc/openvpn# iptables -L | grep 35500 LOG udp -- anywhere 10.55.0.1 state NEW udp dpt:35500 limit: avg 50/min burst 10 LOG level debug prefix "zentyal-firewall redirect " faccept udp -- anywhere 10.55.0.1 state NEW udp dpt:35500 iaccept udp -- anywhere anywhere udp spt:35500 dpt:35500 state NEW configuration server # listen on? (optional) local ip external port 35500 proto udp dev tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh1024.pem server 10.55.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 192.168.1.0 255.255.0.0" client-config-dir ccd route 192.168.1.0 255.255.0.0 keepalive 10 120 cipher BF-CBC comp-lzo persist-key persist-tun verb 6 config client client dev tun proto udp remote ip server 35500 resolv-retry infinite nobind persist-key persist-tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/client1.crt key /etc/openvpn/keys/client1.key cipher BF-CBC comp-lzo log-append /var/log/openvpn/openvpn_client1.log status /var/log/openvpn/status I have a few days I can not understand where the problem is hidden ... already changed all the keys that opened 3 times in iptables can help raise the tunnel.
