Can not establish connection to server

cha0sunity

This is my second attempt to set up and openvpn server. The first attempt ended poorly and I've spent about a week looking around for solutions to my problem, so far I have found none. I'm hoping someone can point out what I may have over looked.

My server is a raspberrypi running arch linux. Currently the only client I am working with is a windows 7 laptop.

I have port forwarding enable and pointed to the server.

This is my server config file from the raspberrypi (Arch Linux):

port 1194
proto udp
dev tun

ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/Gatekeeper.crt
key /etc/openvpn/certs/Gatekeeper.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

client-to-client
keepalive 1800 4000

cipher DES-EDE3-CBC # Triple-DES
comp-lzo

max-clients 10

persist-key
persist-tun

log /var/log/openvpn.log
status /var/log/openvpn-status.log
verb 5
mute 20

This is the config file from the client (windows 7)

client

dev tun

proto udp

remote 71.87.152.167 1194

resolv-retry infinite

nobind
auth-nocache
script-security 2

persist-key
persist-tun

ca C:\\Program Files\\OpenVPN\\config\\ca.crt
cert C:\\Program Files\\OpenVPN\\config\\work.crt
key C:\\Program Files\\OpenVPN\\config\\work.key
tls-auth C:\\Program Files\\OpenVPN\config\\ta.key 0

ns-cert-type server

cipher DES-EDE3-CBC

comp-lzo yes

verb 3

This is a the log file from the server. I have no idea why the ports are random and not 1194

Wed Dec 31 17:00:12 1969 us=952043 Current Parameter Settings:
Wed Dec 31 17:00:12 1969 us=953165 config = '/etc/openvpn/Gatekeeper-vpn.conf'
Wed Dec 31 17:00:12 1969 us=953459 mode = 1
Wed Dec 31 17:00:12 1969 us=953654 persist_config = DISABLED
Wed Dec 31 17:00:12 1969 us=953849 persist_mode = 1
Wed Dec 31 17:00:12 1969 us=954040 show_ciphers = DISABLED
Wed Dec 31 17:00:12 1969 us=954230 show_digests = DISABLED
Wed Dec 31 17:00:12 1969 us=954414 show_engines = DISABLED
Wed Dec 31 17:00:12 1969 us=954598 genkey = DISABLED
Wed Dec 31 17:00:12 1969 us=954782 key_pass_file = '[UNDEF]'
Wed Dec 31 17:00:12 1969 us=954972 show_tls_ciphers = DISABLED
Wed Dec 31 17:00:12 1969 us=955157 Connection profiles [default]:
Wed Dec 31 17:00:12 1969 us=955360 proto = udp
Wed Dec 31 17:00:12 1969 us=955561 local = '[UNDEF]'
Wed Dec 31 17:00:12 1969 us=955760 local_port = 1194
Wed Dec 31 17:00:12 1969 us=955964 remote = '[UNDEF]'
Wed Dec 31 17:00:12 1969 us=956169 remote_port = 1194
Wed Dec 31 17:00:12 1969 us=956375 remote_float = DISABLED
Wed Dec 31 17:00:12 1969 us=956574 bind_defined = DISABLED
Wed Dec 31 17:00:12 1969 us=956769 bind_local = ENABLED
Wed Dec 31 17:00:12 1969 us=956970 NOTE: --mute triggered...
Wed Dec 31 17:00:12 1969 us=957287 212 variation(s) on previous 20 message(s) suppressed by --mute
Wed Dec 31 17:00:12 1969 us=957511 OpenVPN 2.3.4 armv6l-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jul 1 2014
Wed Dec 31 17:00:12 1969 us=957880 library versions: OpenSSL 1.0.1i 6 Aug 2014, LZO 2.08
Wed Dec 31 17:00:14 1969 us=928110 Diffie-Hellman initialized with 2048 bit key
Wed Dec 31 17:00:14 1969 us=977671 Control Channel Authentication: using '/etc/openvpn/certs/ta.key' as a OpenVPN static key file
Wed Dec 31 17:00:14 1969 us=978123 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 31 17:00:14 1969 us=978389 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 31 17:00:14 1969 us=978713 TLS-Auth MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Dec 31 17:00:14 1969 us=979103 Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Dec 31 17:00:15 1969 us=266 ROUTE: default_gateway=UNDEF
Wed Dec 31 17:00:16 1969 us=741096 TUN/TAP device tun0 opened
Wed Dec 31 17:00:16 1969 us=796938 TUN/TAP TX queue length set to 100
Wed Dec 31 17:00:16 1969 us=797307 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 31 17:00:16 1969 us=797714 /usr/bin/ip link set dev tun0 up mtu 1500
Wed Dec 31 17:00:16 1969 us=859770 /usr/bin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Wed Dec 31 17:00:16 1969 us=903558 /usr/bin/ip route add 10.8.0.0/24 via 10.8.0.2
Wed Dec 31 17:00:16 1969 us=967344 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Dec 31 17:00:16 1969 us=976031 UDPv4 link local (bound): [undef]
Wed Dec 31 17:00:16 1969 us=977136 UDPv4 link remote: [undef]
Wed Dec 31 17:00:16 1969 us=977449 MULTI: multi_init called, r=256 v=256
Wed Dec 31 17:00:16 1969 us=978881 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Dec 31 17:00:16 1969 us=979339 IFCONFIG POOL LIST
Wed Dec 31 17:00:16 1969 us=989176 Initialization Sequence Completed
Wed Dec 31 17:00:45 1969 us=33835 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:00:45 1969 us=34434 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64218
Wed Dec 31 17:00:47 1969 us=412037 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:00:47 1969 us=412445 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64218
Wed Dec 31 17:00:50 1969 us=982408 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:00:50 1969 us=982820 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64218
Wed Dec 31 17:00:59 1969 us=129476 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:00:59 1969 us=129910 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64218
Wed Dec 31 17:01:15 1969 us=190625 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:01:15 1969 us=191057 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64218
Wed Dec 31 17:01:48 1969 us=23764 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:01:48 1969 us=24211 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64219
Wed Dec 31 17:01:50 1969 us=486531 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:01:50 1969 us=486906 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64219
Wed Dec 31 17:01:54 1969 us=183156 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:01:54 1969 us=183701 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64219
Wed Dec 31 17:02:02 1969 us=464624 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:02:02 1969 us=465174 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64219
Wed Dec 31 17:02:18 1969 us=290749 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:02:18 1969 us=291288 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64219
Wed Dec 31 17:02:50 1969 us=826802 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:02:50 1969 us=827230 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220
Wed Dec 31 17:02:51 1969 us=978324 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:02:51 1969 us=978711 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220
Wed Dec 31 17:02:56 1969 us=593170 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:02:56 1969 us=593583 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220
Wed Dec 31 17:03:04 1969 us=546282 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:04 1969 us=546718 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220
Wed Dec 31 17:03:20 1969 us=478039 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:20 1969 us=478474 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220
Wed Dec 31 17:03:52 1969 us=720383 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:52 1969 us=720807 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64221
Wed Dec 31 17:03:54 1969 us=767433 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:54 1969 us=767840 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64221
Wed Dec 31 17:03:58 1969 us=863900 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:58 1969 us=864335 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64221
Wed Dec 31 17:04:23 1969 us=70343 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:04:23 1969 us=70730 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64221
Wed Dec 31 17:04:54 1969 us=353899 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:04:54 1969 us=354287 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64222
Wed Dec 31 17:04:56 1969 us=582623 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:04:56 1969 us=583007 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64222
Wed Dec 31 17:05:01 1969 us=42387 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:05:01 1969 us=42835 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64222
Wed Dec 31 17:05:08 1969 us=962480 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:05:08 1969 us=963077 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64222
Wed Dec 31 17:05:25 1969 us=932161 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:05:25 1969 us=932672 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64222
Wed Dec 31 17:05:55 1969 us=950962 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:05:55 1969 us=951408 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64223
Wed Dec 31 17:05:58 1969 us=396772 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:05:58 1969 us=397181 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64223
Wed Dec 31 17:06:02 1969 us=65822 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:06:02 1969 us=66279 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64223
Wed Dec 31 17:06:09 1969 us=969323 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:06:09 1969 us=969828 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64223
Wed Dec 31 17:06:26 1969 us=415752 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:06:26 1969 us=416162 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64223
Wed Dec 31 17:06:58 1969 us=886817 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:06:58 1969 us=887236 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64224
Wed Dec 31 17:07:00 1969 us=115971 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:07:00 1969 us=116386 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64224
Wed Dec 31 17:07:05 1969 us=37397 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:07:05 1969 us=37802 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64224
Wed Dec 31 17:07:13 1969 us=747880 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:07:13 1969 us=748312 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64224
Wed Dec 31 17:07:29 1969 us=337908 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:07:29 1969 us=338321 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64224
Wed Dec 31 17:07:59 1969 us=982967 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:07:59 1969 us=983400 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64225
Wed Dec 31 17:08:01 1969 us=985954 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:08:01 1969 us=986395 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64225
Wed Dec 31 17:08:05 1969 us=996515 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:08:05 1969 us=996938 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64225
Wed Dec 31 17:08:14 1969 us=106758 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:08:14 1969 us=107233 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64225
Wed Dec 31 17:08:30 1969 us=693281 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:08:30 1969 us=693766 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64225
Wed Dec 31 17:09:02 1969 us=494551 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:09:02 1969 us=494992 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64227
Wed Dec 31 17:09:04 1969 us=855652 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:09:04 1969 us=856173 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64227
Wed Dec 31 17:09:08 1969 us=397034 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:09:08 1969 us=397443 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64227
Wed Dec 31 17:09:16 1969 us=731420 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:09:16 1969 us=731923 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64227
Wed Dec 31 17:09:33 1969 us=51406 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:09:33 1969 us=51830 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64227
Wed Dec 31 17:10:04 1969 us=656412 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:10:04 1969 us=656797 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64228
Wed Dec 31 17:10:06 1969 us=829057 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:10:06 1969 us=829417 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64228
Wed Dec 31 17:10:10 1969 us=91979 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:10:10 1969 us=92363 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64228
Wed Dec 31 17:10:18 1969 us=829844 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:10:18 1969 us=830308 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64228
Wed Dec 31 17:10:34 1969 us=268336 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:10:34 1969 us=268719 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64228
Wed Dec 31 17:11:06 1969 us=42311 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:11:06 1969 us=42851 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62941
Wed Dec 31 17:11:08 1969 us=326822 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:11:08 1969 us=327200 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62941
Wed Dec 31 17:11:12 1969 us=899296 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:11:12 1969 us=899769 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62941
Wed Dec 31 17:11:20 1969 us=391455 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:11:20 1969 us=391871 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62941
Wed Dec 31 17:11:36 1969 us=119287 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:11:36 1969 us=119690 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62941
Wed Dec 31 17:12:08 1969 us=211679 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:12:08 1969 us=212074 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62942
Wed Dec 31 17:12:10 1969 us=593789 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:12:10 1969 us=594151 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62942
Wed Dec 31 17:12:14 1969 us=166131 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:12:14 1969 us=166512 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62942
Wed Dec 31 17:12:22 1969 us=174945 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:12:22 1969 us=175332 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62942
Mon Sep 22 14:34:12 2014 us=804205 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:34:12 2014 us=804706 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62942
Mon Sep 22 14:34:44 2014 us=213900 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:34:44 2014 us=214333 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62943
Mon Sep 22 14:34:46 2014 us=224918 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:34:46 2014 us=225339 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62943
Mon Sep 22 14:34:50 2014 us=244454 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:34:50 2014 us=244857 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62943
Mon Sep 22 14:34:58 2014 us=378001 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:34:58 2014 us=378408 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62943
Mon Sep 22 14:35:14 2014 us=925633 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:35:14 2014 us=926228 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:62943
Mon Sep 22 14:35:46 2014 us=445209 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:35:46 2014 us=445626 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50380
Mon Sep 22 14:35:48 2014 us=685145 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:35:48 2014 us=685531 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50380
Mon Sep 22 14:35:52 2014 us=48323 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:35:52 2014 us=48730 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50380
Mon Sep 22 14:36:00 2014 us=261503 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:36:00 2014 us=261936 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50380
Mon Sep 22 14:36:16 2014 us=493649 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:36:16 2014 us=494134 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50380
Mon Sep 22 14:36:48 2014 us=731829 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:36:48 2014 us=732242 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50381
Mon Sep 22 14:36:51 2014 us=109728 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:36:51 2014 us=110112 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50381
Mon Sep 22 14:36:55 2014 us=866786 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:36:55 2014 us=867192 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50381
Mon Sep 22 14:37:03 2014 us=292717 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:37:03 2014 us=293170 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50381
Mon Sep 22 14:37:19 2014 us=205500 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:37:19 2014 us=206071 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50381
Mon Sep 22 14:37:50 2014 us=107491 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:37:50 2014 us=107913 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50382
Mon Sep 22 14:37:52 2014 us=211093 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:37:52 2014 us=211579 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50382
Mon Sep 22 14:37:56 2014 us=423851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:37:56 2014 us=424253 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50382
Mon Sep 22 14:38:04 2014 us=746946 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 14:38:04 2014 us=747461 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50382
Mon Sep 22 16:38:20 2014 us=436475 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:38:20 2014 us=437461 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50382
Mon Sep 22 16:38:52 2014 us=355190 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:38:52 2014 us=355690 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50383
Mon Sep 22 16:38:54 2014 us=644470 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:38:54 2014 us=644860 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50383
Mon Sep 22 16:38:58 2014 us=79579 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:38:58 2014 us=80005 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50383
Mon Sep 22 16:39:06 2014 us=700934 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:39:06 2014 us=701457 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50383
Mon Sep 22 16:39:22 2014 us=107994 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:39:22 2014 us=108391 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:50383
Mon Sep 22 16:39:49 2014 us=78834 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:39:49 2014 us=79264 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53418
Mon Sep 22 16:39:51 2014 us=184466 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:39:51 2014 us=184854 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53418
Mon Sep 22 16:39:55 2014 us=397039 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:39:55 2014 us=397449 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53418
Mon Sep 22 16:40:03 2014 us=658374 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:40:03 2014 us=658788 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53418
Mon Sep 22 16:40:19 2014 us=357896 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:40:19 2014 us=358307 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53418
Mon Sep 22 16:43:07 2014 us=498402 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:43:07 2014 us=498846 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53421
Mon Sep 22 16:43:09 2014 us=583254 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:43:09 2014 us=583644 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53421
Mon Sep 22 16:43:13 2014 us=755511 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:43:13 2014 us=755925 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53421
Mon Sep 22 16:43:21 2014 us=413289 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:43:21 2014 us=413602 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53421
Mon Sep 22 16:43:37 2014 us=328704 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:43:37 2014 us=329212 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53421
Mon Sep 22 16:44:09 2014 us=499337 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:44:09 2014 us=499761 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53422
Mon Sep 22 16:44:11 2014 us=508655 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:44:11 2014 us=509048 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53422
Mon Sep 22 16:44:15 2014 us=532576 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:44:15 2014 us=532980 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53422
Mon Sep 22 16:44:23 2014 us=227042 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:44:23 2014 us=227347 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53422
Mon Sep 22 16:44:40 2014 us=215366 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:44:40 2014 us=215769 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53422
Mon Sep 22 16:45:11 2014 us=221150 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:45:11 2014 us=221573 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53423
Mon Sep 22 16:45:13 2014 us=319644 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:45:13 2014 us=320029 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53423
Mon Sep 22 16:45:17 2014 us=514869 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:45:17 2014 us=515281 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53423
Mon Sep 22 16:45:25 2014 us=488518 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:45:25 2014 us=488904 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53423
Mon Sep 22 16:45:41 2014 us=126393 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:45:41 2014 us=126807 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53423
Mon Sep 22 16:46:13 2014 us=738679 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:46:13 2014 us=739108 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53424
Mon Sep 22 16:46:15 2014 us=749402 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:46:15 2014 us=749791 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53424
Mon Sep 22 16:46:19 2014 us=768914 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:46:19 2014 us=769327 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53424
Mon Sep 22 16:46:27 2014 us=384929 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:46:27 2014 us=385321 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53424
Mon Sep 22 16:46:43 2014 us=133888 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:46:43 2014 us=134304 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:53424
Mon Sep 22 16:47:15 2014 us=814996 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:47:15 2014 us=815484 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:58983
Mon Sep 22 16:47:18 2014 us=12670 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:47:18 2014 us=13064 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:58983
Mon Sep 22 16:47:21 2014 us=309332 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:47:21 2014 us=309740 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:58983
Mon Sep 22 16:47:29 2014 us=169809 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:47:29 2014 us=170176 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:58983
Mon Sep 22 16:47:45 2014 us=272801 Authenticate/Decrypt packet error: packet HMAC authentication failed
Mon Sep 22 16:47:45 2014 us=273214 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:58983

I can't find a log file on the client.
I'm at a loss for what is causing the connectivity issue. Any advice would be welcome.

eschzeepee

Perhaps your configuration for the server is not correct. Especially the fields for the certificates, the .crt and .key files and direction.

Try to include the same string in the server as you has it done in the client file.

For example for: key /etc/openvpn/certs/Gatekeeper.key

It should be: key C:\\SUBJECT\\openvpn\\certs\\Gatekeeper.key

Watch out that you also use the double backslash "\\" in the server strings.

Traffic

See tls-auth in the The Manual v23x.

Check your direction ...
Server: tls-auth key 0
Client: tls-auth key 1

cha0sunity

eschzeepee wrotePerhaps your configuration for the server is not correct. Especially the fields for the certificates, the .crt and .key files and direction.

Try to include the same string in the server as you has it done in the client file.

For example for: key /etc/openvpn/certs/Gatekeeper.key

It should be: key C:\\SUBJECT\\openvpn\\certs\\Gatekeeper.key

Watch out that you also use the double backslash "\\" in the server strings.

Maybe I don't understand what you are saying. Am I supposed to include the path to the client files in the server.conf? I was under the impression that the server.conf contained the path to the keys as they pertain to the local server.

cha0sunity

Ok, I've made some changes and there is now communication between the server and client. I am now receiving this in my log files.

Thu Jan 1 01:16:58 1970 us=19545 198.232.103.10:62809 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:16:58 1970 us=19996 198.232.103.10:62809 TLS Error: TLS handshake failed
Thu Jan 1 01:16:58 1970 us=21015 198.232.103.10:62809 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:16:59 1970 us=600395 198.232.103.10:62810 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:16:59 1970 us=600733 198.232.103.10:62810 TLS Error: TLS handshake failed
Thu Jan 1 01:16:59 1970 us=601480 198.232.103.10:62810 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:02 1970 us=41356 198.232.103.10:62811 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:02 1970 us=41693 198.232.103.10:62811 TLS Error: TLS handshake failed
Thu Jan 1 01:17:02 1970 us=42549 198.232.103.10:62811 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:06 1970 us=5137 198.232.103.10:62812 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:06 1970 us=5570 198.232.103.10:62812 TLS Error: TLS handshake failed
Thu Jan 1 01:17:06 1970 us=6324 198.232.103.10:62812 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:08 1970 us=966528 198.232.103.10:62814 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:08 1970 us=966869 198.232.103.10:62814 TLS Error: TLS handshake failed
Thu Jan 1 01:17:08 1970 us=967609 198.232.103.10:62814 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:10 1970 us=400647 198.232.103.10:62815 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:10 1970 us=592576 198.232.103.10:62815 TLS Error: TLS handshake failed
Thu Jan 1 01:17:10 1970 us=593411 198.232.103.10:62815 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:13 1970 us=604206 198.232.103.10:62816 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:13 1970 us=604550 198.232.103.10:62816 TLS Error: TLS handshake failed
Thu Jan 1 01:17:13 1970 us=605401 198.232.103.10:62816 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:16 1970 us=54336 198.232.103.10:62817 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:16 1970 us=54788 198.232.103.10:62817 TLS Error: TLS handshake failed
Thu Jan 1 01:17:16 1970 us=55547 198.232.103.10:62817 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:19 1970 us=527576 198.232.103.10:62818 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:19 1970 us=527918 198.232.103.10:62818 TLS Error: TLS handshake failed
Thu Jan 1 01:17:19 1970 us=528677 198.232.103.10:62818 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:21 1970 us=571662 198.232.103.10:8174 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:21 1970 us=572022 198.232.103.10:8174 TLS Error: TLS handshake failed
Thu Jan 1 01:17:21 1970 us=572897 198.232.103.10:8174 SIGUSR1[soft,tls-error] received, client-instance restarting
[root@gatekeeper log]# Thu Jan 1 01:16:58 1970 us=19545 198.232.103.10:62809 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:16:58 1970 us=19996 198.232.103.10:62809 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:16:58 1970 us=21015 198.232.103.10:62809 SIGUSR1[soft,tls-error] received, client-instance restarting
Thu Jan 1 01:17:06 1970 us=5570 198.232.103.10:62812 TLS Error: TLS handshake failed
Thu Jan 1 01:17:06 1970 us=6324 198.232.103.10:62812 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
Thu Jan 1 01:17:08 1970 us=966528 198.232.103.10:62814 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 01:17:08 1970 us=966869 198.232.103.10:62814 TLS Error: TLS handshake failed
[root@gatekeeper log]# Thu Jan 1 01:16:59 1970 us=600395 198.232.103.10:62810 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
Thu Jan 1 01:17:16 1970 us=55547 198.232.103.10:62817 SIGUSR1[soft,tls-error] received, client-instance restarting
[root@gatekeeper log]# Thu Jan 1 01:16:59 1970 us=600733 198.232.103.10:62810 TLS Error: TLS handshake failed
Thu Jan 1 01:17:21 1970 us=571662 198.232.103.10:8174 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: Thu: command not found
Thu Jan 1 01:17:21 1970 us=572022 198.232.103.10:8174 TLS Error: TLS handshake failed
Thu Jan 1 01:17:21 1970 us=572897 198.232.103.10:8174 SIGUSR1[soft,tls-error] received, client-instance restarting
[root@gatekeeper log]# Thu Jan 1 01:16:59 1970 us=601480 198.232.103.10:62810 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:02 1970 us=41356 198.232.103.10:62811 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:02 1970 us=41693 198.232.103.10:62811 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:02 1970 us=42549 198.232.103.10:62811 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:06 1970 us=5137 198.232.103.10:62812 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:06 1970 us=5570 198.232.103.10:62812 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:06 1970 us=6324 198.232.103.10:62812 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:08 1970 us=966528 198.232.103.10:62814 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:08 1970 us=966869 198.232.103.10:62814 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:08 1970 us=967609 198.232.103.10:62814 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:10 1970 us=400647 198.232.103.10:62815 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:10 1970 us=592576 198.232.103.10:62815 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:10 1970 us=593411 198.232.103.10:62815 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:13 1970 us=604206 198.232.103.10:62816 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:13 1970 us=604550 198.232.103.10:62816 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:13 1970 us=605401 198.232.103.10:62816 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:16 1970 us=54336 198.232.103.10:62817 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:16 1970 us=54788 198.232.103.10:62817 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:16 1970 us=55547 198.232.103.10:62817 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:19 1970 us=527576 198.232.103.10:62818 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:19 1970 us=527918 198.232.103.10:62818 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:19 1970 us=528677 198.232.103.10:62818 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:21 1970 us=571662 198.232.103.10:8174 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
-bash: syntax error near unexpected token `('
[root@gatekeeper log]# Thu Jan 1 01:17:21 1970 us=572022 198.232.103.10:8174 TLS Error: TLS handshake failed
-bash: Thu: command not found
[root@gatekeeper log]# Thu Jan 1 01:17:21 1970 us=572897 198.232.103.10:8174 SIGUSR1[soft,tls-error] received, client-instance restarting
-bash: Thu: command not found

I've been looking around for the specific cause to this, but so far have come up with nothing. can anyone point me in the right direction?

cha0sunity

Traffic wroteSee tls-auth in the The Manual v23x.

Check your direction ...
Server: tls-auth key 0
Client: tls-auth key 1

I've done some looking around and now the server and client see each other. I'm getting a tls failed handshake now. It shows up in the log on the server and displays on the vpn client. From what I've read this most often happens because of a fire wall. I have windows firewall turned off on the client and the server iptables is accepted connections from all sources. Do you know of anything else I can check that might be causing this?

Traffic

Traffic wroteSee tls-auth in the The Manual v23x.

Check your direction ...
Server: tls-auth key 0
Client: tls-auth key 1

Did you implement this properly ? (Post your new server & client configs)

cha0sunity wroteWed Dec 31 17:03:20 1969 us=478039 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 31 17:03:20 1969 us=478474 TLS Error: incoming packet authentication failed from [AF_INET]198.232.103.10:64220

This error indicates that your server and client are connecting on the network but they are failing authentication .. so your firewall should be ok.

cha0sunity

My server config (arch)

port 1194
proto udp
dev tun

ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/Gatekeeper.crt
key /etc/openvpn/certs/Gatekeeper.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0

server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

client-to-client
keepalive 1800 4000

cipher DES-EDE3-CBC # Triple-DES
comp-lzo

max-clients 10

;user nobody
;group nobody

persist-key
persist-tun

log /var/log/openvpn.log
status /var/log/openvpn-status.log
verb 5
mute 20

#client-config-dir ccd

My client config (Windows 7)

client

dev tun

proto udp

remote 71.87.152.167 1194

resolv-retry infinite

nobind
auth-nocache
script-security 2

persist-key
persist-tun

ca ca.crt
cert work.crt
key work.key
tls-auth ta.key 1

ns-cert-type server

cipher DES-EDE3-CBC

comp-lzo yes

verb 3

This is now the error i am getting

VERIFY ERROR: depth=1, error=certificate has expired: C
=US, ST=NC, L=Here, O=There, name=EasyRSA
Fri Sep 26 10:27:50 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:140
90086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Fri Sep 26 10:27:50 2014 TLS Error: TLS object -> incoming plaintext read error
Fri Sep 26 10:27:50 2014 TLS Error: TLS handshake failed

I'm not sure why my cert is expired. It's not even 30 days old. Do I need to remake the TLS cert at this point?

cha0sunity

A thought I had about the cert expiring. My server is a raspberry pi. It has no system battery so the clock resets to 1970 on reboot. Could this change of date make the certificates become invalid?

Traffic

Certificates do rely on system clock ... as does https etc ...
:ugeek:

cha0sunity

Ok so I'm about out of ideas to try. I created new certs and keys. Distributed them from the server to the client and got an error I can not reproduce. The reason I can no reproduce this is because I now get an error saying cert expired. The cert was just created today. The other problem I am seeing is in the server log file I see lines like this

Tue Jan 6 01:55:14 1970 us=539546 198.232.103.10:55163 Expected Remote Options hash (VER=V4): '53f7fc82'
RTue Jan 6 01:55:14 1970 us=539990 198.232.103.10:55163 TLS: Initial packet from [AF_INET]198.232.103.10:55163, sid=495a536b 52b7ad1e
WWRRWRWRWWWWWRWRWRWRWWWRWRWRWRWWWRWRWRWRWRWRWRWRWRWRWRWRW[root@gatekeeper openvpn

I'm at a loss for the strong of W's and R's might be. My only thought is it being read and write permissions but it looks so out of place I'm not sure what to make of it. I'm about to give up on this, it's been two weeks and I've yet to get a single connection from client to server. Any help?

Traffic

cha0sunity wrotem at a loss for the strong of W's and R's might be. My only thought is it being read and write permissions

Read & Write to the tun device .. shown at log verb 5. If you use verb 4 you will not see these any more.

cha0sunity wroteOk so I'm about out of ideas to try. I created new certs and keys. Distributed them from the server to the client and got an error I can not reproduce. The reason I can no reproduce this is because I now get an error saying cert expired.

Sounds like you have not established the correct time on the server when you created your PKI ..

cha0sunity wrotes been two weeks and I've yet to get a single connection from client to server. Any help

Try this:
http://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html

And don't even bother with a static key .. this will allow you to to establish a connection with no security
* all data will be transferred in plain text *
but at least you will be able to test your network settings.