Openvpn client server connectivity issue

sdbhabal

Hello Experts,

I have installed 'openvpn-2.3.2-2.el6.x86_64' on my CentOS release 6.5 (Final).
The link which i followed is below:
https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-6
Installation went successful as per instruction.
Now i have copied client certificate to windows 8 client machine & installed OpenVPN GUI client softwares there.
Copied client.ovpn file to 'C:\Program Files\OpenVPN\config' directory of windows 8 client machine & trying to connect to the server.
But unfortunately connection is not getting succeeded.

Below is the log in client machine's OpenVPN GUI:
Fri Nov 21 12:02:42 2014 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\client.log: Access is denied. (errno=5)
Fri Nov 21 12:02:42 2014 OpenVPN 2.3.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Nov 7 2014
Fri Nov 21 12:02:42 2014 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.05
Fri Nov 21 12:02:42 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Nov 21 12:02:42 2014 Need hold release from management interface, waiting...
Fri Nov 21 12:02:42 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Nov 21 12:02:43 2014 MANAGEMENT: CMD 'state on'
Fri Nov 21 12:02:43 2014 MANAGEMENT: CMD 'log all on'
Fri Nov 21 12:02:43 2014 MANAGEMENT: CMD 'hold off'
Fri Nov 21 12:02:43 2014 MANAGEMENT: CMD 'hold release'
Fri Nov 21 12:02:43 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Nov 21 12:02:43 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Nov 21 12:02:43 2014 UDPv4 link local: [undef]
Fri Nov 21 12:02:43 2014 UDPv4 link remote: [AF_INET]49.248.117.162:1194
Fri Nov 21 12:02:43 2014 MANAGEMENT: >STATE:1416551563,WAIT,,,
Fri Nov 21 12:03:43 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Nov 21 12:03:43 2014 TLS Error: TLS handshake failed
Fri Nov 21 12:03:43 2014 SIGUSR1[soft,tls-error] received, process restarting
Fri Nov 21 12:03:43 2014 MANAGEMENT: >STATE:1416551623,RECONNECTING,tls-error,,
Fri Nov 21 12:03:43 2014 Restart pause, 2 second(s)

Please help.

sdbhabal

Hi,

The previous problem has got resolved, i have opened 1194 UDP port in my iptables.
Now connection from client to server is getting initiated, but it not getting succeeded, OpenVPN client giving below error:
Connecting to client has failed.

In my server /etc/openvpn/openvpn.log says:
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 TLS: Initial packet from [AF_INET]114.143.148.221:58143, sid=317a90f4 17f01aab
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 VERIFY OK: depth=1, C=IN, ST=MH, L=Mumbai, O=xyz, OU=server, CN=droplet.example.com, name=server, emailAddress=santosh@xyz.in
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 VERIFY OK: depth=0, C=IN, ST=MH, L=Mumbai, O=xyz, OU=server, CN=client, name=server, emailAddress=santosh@xyz.in
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Nov 21 12:26:08 2014 114.143.148.221:58143 [client] Peer Connection Initiated with [AF_INET]114.143.148.221:58143
Fri Nov 21 12:26:08 2014 client/114.143.148.221:58143 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Nov 21 12:26:08 2014 client/114.143.148.221:58143 MULTI: Learn: 10.8.0.6 -> client/114.143.148.221:58143
Fri Nov 21 12:26:08 2014 client/114.143.148.221:58143 MULTI: primary virtual IP for client/114.143.148.221:58143: 10.8.0.6
Fri Nov 21 12:26:10 2014 client/114.143.148.221:58143 PUSH: Received control message: 'PUSH_REQUEST'
Fri Nov 21 12:26:10 2014 client/114.143.148.221:58143 send_push_reply(): safe_cap=940
Fri Nov 21 12:26:10 2014 client/114.143.148.221:58143 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

Please help.