Hi, I have been looking around to find some answers but came across so many of them that i am starting to get lost in all of this. I am getting the : TLS Erorr: TLS key negotiation failed to occure within 60 seconds (check your network connectivity) TLS Error: TLS handshake failed SIGUSR1 [soft,tls-error] received, process restarting [quote]client dev tun proto udp remote IP ADDRESS 1194 resolv-retry infinite nobind persist-key persist-tun mute-replay-warnings ns-cert-type server key-direction 1 cipher AES-128-CBC comp-lzo verb 1 mute 20 [/quote] I have read that this might have something to do with the firewall but i don't have a clue of how to fix this because all of this is kinda new for me. Thanks in advance.

TLS Error: TLS key negotiation failed to occur within 60 sec

Hesus

Hi,

I have been looking around to find some answers but came across so many of them that i am starting to get lost in all of this.

I am getting the :
TLS Erorr: TLS key negotiation failed to occure within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
SIGUSR1 [soft,tls-error] received, process restarting

client
dev tun
proto udp
remote IP ADDRESS 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20

I have read that this might have something to do with the firewall but i don't have a clue of how to fix this because all of this is kinda new for me.

Thanks in advance.

Traffic

Who owns the server you are trying to connect to ?

It is very likely your own Firewall .. allow Outgoing UDP:1194

Hesus

I own it, it is my raspberry pi

Thanks for the answer i will try this.

Hesus

the server is my pi

i set the port in the outbound firewall setting but still no luck.

Hesus

nothing changes when i allow port 1194 acces trough the windows firewall. I tried to connect my android phone with openvpn for android but it gave me a connection timeout. It tells me it has 1,23 kb going out.

The server is my raspberry pi. I made it a VPN server following THIS tutorial.

Traffic

Please post your server config and log.

Hesus

server conf

local 'IP address'
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/Hesus.crt
key /etc/openvpn/easy-rsa/keys/Hesus.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.0.20 255.255.255.0"
push "route dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/key/ta.key 0

openvpn log

Sun Mar 1 20:17:09 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Sun Mar 1 20:17:09 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as interne$
Sun Mar 1 20:17:09 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Mar 1 20:17:09 2015 Cannot open file key file '/etc/openvpn/easy-rsa/key/ta.key': No such file or directory (errno=2)
Sun Mar 1 20:17:09 2015 Exiting

Which log file do you need? I cant find any server.log file.

Traffic

Hesus wroteserver conf

local 'IP address' # 192.168.0.1(ish) bad idea #1
ifconfig 10.8.0.1 10.8.0.2 # delete this
push "route 192.168.0.20 255.255.255.0" # Delete the netmask
tls-auth /etc/openvpn/easy-rsa/key/ta.key 0 # file ..
log /etc/openvpn/server.log # add this
openvpn log

Sun Mar 1 20:17:09 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014

bad idea #1:
Sun Mar 1 20:17:09 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as interne$

# file ..
Sun Mar 1 20:17:09 2015 Cannot open file key file '/etc/openvpn/easy-rsa/key/ta.key': No such file or directory (errno=2)
Sun Mar 1 20:17:09 2015 Exiting
Which log file do you need? I cant find any server.log file.

That is the server log .. probably.

Title:
Re: TLS Error: TLS key negotiation failed to occur within 60

You have not gotten to that stage yet ...

Hesus

Traffic wrote
Hesus wroteserver conf

local 'IP address' # 192.168.0.1(ish) bad idea #1
ifconfig 10.8.0.1 10.8.0.2 # delete this
push "route 192.168.0.20 255.255.255.0" # Delete the netmask
tls-auth /etc/openvpn/easy-rsa/key/ta.key 0 # file ..
log /etc/openvpn/server.log # add this
openvpn log

Sun Mar 1 20:17:09 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014

bad idea #1:
Sun Mar 1 20:17:09 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as interne$

# file ..
Sun Mar 1 20:17:09 2015 Cannot open file key file '/etc/openvpn/easy-rsa/key/ta.key': No such file or directory (errno=2)
Sun Mar 1 20:17:09 2015 Exiting
Which log file do you need? I cant find any server.log file.
That is the server log .. probably.

Title:
Re: TLS Error: TLS key negotiation failed to occur within 60

You have not gotten to that stage yet ...

So i should change my local LAN address to something not so common?

The ta.key file is there i can open it with an editor.