OPEN VPN connection error

dev

Hi,

I am having problem in connecting to openvpn server (install on vps cenos - linunx) from ubuntu client.

I have basicly followed this tutorial.
http://www.servermom.org/how-to-build-openvpn-server-on-centos-6-x/732/

I try to connect from ubuntu (client) with username and password authentication and ca.crt. file

I get VPN failed because the connection timed out.

dev

This is the server config file:

local 95.138.xxx.xx
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

------------------------------------------------------------------------------------------------------------------------------------------------
and this is the client config file:
client
dev tun
proto udp
remote 95.138.xxx.xx 1194 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
verb 3

-------------------------------------------------------------------------------------------------------------------------------------------
log on local machine (client)

Jun 6 09:31:11 dev NetworkManager[742]: <info> Starting VPN service 'openvpn'...
Jun 6 09:31:11 dev NetworkManager[742]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 4211
Jun 6 09:31:11 dev NetworkManager[742]: <info> VPN service 'openvpn' appeared; activating connections
Jun 6 09:31:11 dev NetworkManager[742]: <info> VPN plugin state changed: starting (3)
Jun 6 09:31:11 dev NetworkManager[742]: <info> VPN connection 'Gotri OpenVPN' (Connect) reply received.
Jun 6 09:31:11 dev nm-openvpn[4217]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jul 12 2013
Jun 6 09:31:11 dev nm-openvpn[4217]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Jun 6 09:31:11 dev nm-openvpn[4217]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jun 6 09:31:11 dev nm-openvpn[4217]: UDPv4 link local: [undef]
Jun 6 09:31:11 dev nm-openvpn[4217]: UDPv4 link remote: [AF_INET]95.138.xxx.xx:1194
Jun 6 09:31:32 dev whoopsie[1046]: online
Jun 6 09:31:51 whoopsie[1046]: last message repeated 2 times
Jun 6 09:31:51 dev NetworkManager[742]: <warn> VPN connection 'Gotri OpenVPN' (IP Config Get) timeout exceeded.
Jun 6 09:31:51 dev NetworkManager[742]: <info> Policy set 'Auto Ethernet' (eth0) as default for IPv4 routing and DNS.
Jun 6 09:31:51 dev nm-openvpn[4217]: SIGTERM[hard,] received, process exiting
Jun 6 09:31:56 dev NetworkManager[742]: <info> VPN service 'openvpn' disappeared

--------------------------------------------------------------------------------------------------------------------------------------------------------
server log 1194.log

OpenVPN CLIENT LIST
Updated,Fri Jun 6 08:42:20 2014
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END

dev

Hi,
In ubuntu I am using GUI that allows me to easily connect/disconnect from VPN.

In there I am using gateway as the 95.138.xxx.xx (server Ip addresss)

Authentication
Type = password

Usernamae: xxxxx
Password:xxxxx
CA cetificate: car.crt (file that was generated on the server when install openvpn on the server)

I have other openvpc connection set up on other remote server and it work and I using same method (gui) to connect.

dev

hi,
I have added the log to the server config file and start openvpn

this is the result in the log

Fri Jun 6 13:15:37 2014 OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr 5 2012
Fri Jun 6 13:15:37 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jun 6 13:15:37 2014 PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Fri Jun 6 13:15:37 2014 Diffie-Hellman initialized with 1024 bit key
Fri Jun 6 13:15:37 2014 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Fri Jun 6 13:15:37 2014 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Jun 6 13:15:37 2014 Socket Buffers: R=[229376->131072] S=[229376->131072]
Fri Jun 6 13:15:37 2014 ROUTE default_gateway=95.138.xxx.1
Fri Jun 6 13:15:37 2014 TUN/TAP device tun0 opened
Fri Jun 6 13:15:37 2014 TUN/TAP TX queue length set to 100
Fri Jun 6 13:15:37 2014 /sbin/ip link set dev tun0 up mtu 1500
Fri Jun 6 13:15:37 2014 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Fri Jun 6 13:15:37 2014 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Fri Jun 6 13:15:37 2014 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Fri Jun 6 13:15:37 2014 UDPv4 link local (bound): 95.138.xxx.xx:1194
Fri Jun 6 13:15:37 2014 UDPv4 link remote: [undef]
Fri Jun 6 13:15:37 2014 MULTI: multi_init called, r=256 v=256
Fri Jun 6 13:15:37 2014 IFCONFIG POOL: base=10.8.0.4 size=62
Fri Jun 6 13:15:37 2014 Initialization Sequence Completed

However when I try to connect VPN from client (ubuntu gui) there is no log recorded.

dev

HI,

In the dir (/etc/openvpn ) it has already update-resolve-conf file

#!/bin/bash
#
# Parses DHCP options from openvpn to update resolv.conf
# To use set as 'up' and 'down' script in your openvpn *.conf:
# up /etc/openvpn/update-resolv-conf
# down /etc/openvpn/update-resolv-conf
#
# Used snippets of resolvconf script by Thomas Hood <jdthood@yahoo.co.uk>
# and Chris Hanson
# Licensed under the GNU GPL. See /usr/share/common-licenses/GPL.
#
# 05/2006 chlauber@bnc.ch
#
# Example envs set from openvpn:
# foreign_option_1='dhcp-option DNS 193.43.27.132'
# foreign_option_2='dhcp-option DNS 193.43.27.133'
# foreign_option_3='dhcp-option DOMAIN be.bnc.ch'

[ -x /sbin/resolvconf ] || exit 0

case $script_type in

up)
for optionname in ${!foreign_option_*} ; do
option="${!optionname}"
echo $option
part1=$(echo "$option" | cut -d " " -f 1)
if [ "$part1" == "dhcp-option" ] ; then
part2=$(echo "$option" | cut -d " " -f 2)
part3=$(echo "$option" | cut -d " " -f 3)
if [ "$part2" == "DNS" ] ; then
IF_DNS_NAMESERVERS="$IF_DNS_NAMESERVERS $part3"
fi
if [ "$part2" == "DOMAIN" ] ; then
IF_DNS_SEARCH="$IF_DNS_SEARCH $part3"
fi
fi
done
R=""
for SS in $IF_DNS_SEARCH ; do
R="${R}search $SS
"
done
for NS in $IF_DNS_NAMESERVERS ; do
R="${R}nameserver $NS
"
done
echo -n "$R" | /sbin/resolvconf -a "${dev}.inet"
;;
down)
/sbin/resolvconf -d "${dev}.inet"
;;
esac

The client conf and ca.crt is in my home dir in the same folder.

dev

hi,
I haved the server.log to the config file

ans this is the log after I do

sudo openvpn --config server.ovpn

server.log
Mon Jun 9 11:31:13 2014 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables
Mon Jun 9 11:31:13 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Jun 9 11:31:13 2014 UDPv4 link local: [undef]
Mon Jun 9 11:31:13 2014 UDPv4 link remote: [AF_INET]95.138.xxx.xx:1194
Mon Jun 9 11:32:13 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jun 9 11:32:13 2014 TLS Error: TLS handshake failed
Mon Jun 9 11:32:13 2014 SIGUSR1[soft,tls-error] received, process restarting
Mon Jun 9 11:32:13 2014 Restart pause, 2 second(s)
Mon Jun 9 11:32:15 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
server.ovpn

client
dev tun
proto udp
remote 95.138.xxx.xx 1194 # - Your server IP and OpenVPN Port
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
reneg-sec 0
log server.log
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
verb 3