Hi, i am pretty new to OVPN and i tried to set up a VPN Server on my 1&1 VServer (running Ubuntu 14.04) I followed this TuT: [url]http://wiki.ubuntuusers.de/OpenVPN[/url] When Trying to connect from my Windows PC (with the OpenVPN GUI) the following Error occurs: [code]Sat Feb 28 13:48:21 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014 Sat Feb 28 13:48:21 2015 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08 Sat Feb 28 13:48:21 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Sat Feb 28 13:48:21 2015 Need hold release from management interface, waiting... Sat Feb 28 13:48:21 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Sat Feb 28 13:48:21 2015 MANAGEMENT: CMD 'state on' Sat Feb 28 13:48:21 2015 MANAGEMENT: CMD 'log all on' Sat Feb 28 13:48:21 2015 MANAGEMENT: CMD 'hold off' Sat Feb 28 13:48:21 2015 MANAGEMENT: CMD 'hold release' Sat Feb 28 13:48:21 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Sat Feb 28 13:48:22 2015 Socket Buffers: R=[8192->8192] S=[8192->8192] Sat Feb 28 13:48:22 2015 UDPv4 link local: [undef] Sat Feb 28 13:48:22 2015 UDPv4 link remote: [AF_INET]213.165.90.181:1194 Sat Feb 28 13:48:22 2015 MANAGEMENT: >STATE:1425127702,WAIT,,, Sat Feb 28 13:49:23 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Sat Feb 28 13:49:23 2015 TLS Error: TLS handshake failed Sat Feb 28 13:49:23 2015 SIGUSR1[soft,tls-error] received, process restarting Sat Feb 28 13:49:23 2015 MANAGEMENT: >STATE:1425127763,RECONNECTING,tls-error,, Sat Feb 28 13:49:23 2015 Restart pause, 2 second(s)[/code] This is my client.ovpn: [code] client dev tun proto udp remote xx.xx.90.181 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert client1.crt key client1.key comp-lzo verb 3 [/code] and this is my server.config: [code];local a.b.c.d port 1194 proto udp dev tun ca ./easy-rsa2/keys/ca.crt cert cert ./easy-rsa2/keys/server.crt key ./easy-rsa2/keys/server.key dh ./easy-rsa2/keys/dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 3 [/code] I tried to add Rules in my Windows Firewall for the Standard UDP-Port but the Error stays the same... Thanks in Advance :)

[quote="juli.il"]Okay, sounds like a dumb question, but where can i find the server logs?[/quote] use the log directive to create a log file. Michael.

TLS Error: TLS key negotiation failed to occur within 60 se

juli.il

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

maikcat

server side logs please?

Michael.

juli.il

Okay, sounds like a dumb question, but where can i find the server logs?

Hesus

don't you need to put the port number behind the remote ip address?

maikcat

juli.il wroteOkay, sounds like a dumb question, but where can i find the server logs?

use the log directive to create a log file.

Michael.

juli.il

@Hesus
It uses standard UDP-Port if nothing is specified...

juli.il

@maikcat

Okay so i uncomended the line

log         openvpn.log

then I restarted my server, tried to connect and then searched '/var/log' for openvpn.log but there was no such file :/

probably something dumb i am not seeing yet... I am pretty new to Linux...

But much Thanks for your help 🙂

juli.il

Okay. Thanks guys 🙂
I found the log file and it said cant open dh1024.pem
so i looked in my keys dir, and well there was no dh1024.pem but only dh2048.pem
The problem was in the 'vars' file keysize of 2048 was specified, but in the server.conf it was the path to dh1024.pem.
Now i can connect and everything is wokring 🙂
Thank you very much for the tip with server side logs

juli.il

Okay now a the same TLS_Error occured but with a different log:

Sun Mar  1 23:09:47 2015 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec  1 2014
Sun Mar  1 23:09:47 2015 Diffie-Hellman initialized with 2048 bit key
Sun Mar  1 23:09:47 2015 Socket Buffers: R=[133120->131072] S=[133120->131072]
Sun Mar  1 23:09:47 2015 ROUTE_GATEWAY ON_LINK IFACE=venet0 HWADDR=00:00:00:00:00:00
Sun Mar  1 23:09:47 2015 TUN/TAP device tun0 opened
Sun Mar  1 23:09:47 2015 TUN/TAP TX queue length set to 100
Sun Mar  1 23:09:47 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Mar  1 23:09:47 2015 /sbin/ip link set dev tun0 up mtu 1500
Sun Mar  1 23:09:47 2015 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Mar  1 23:09:47 2015 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Mar  1 23:09:47 2015 GID set to nogroup
Sun Mar  1 23:09:47 2015 UID set to nobody
Sun Mar  1 23:09:47 2015 UDPv4 link local (bound): [undef]
Sun Mar  1 23:09:47 2015 UDPv4 link remote: [undef]
Sun Mar  1 23:09:47 2015 MULTI: multi_init called, r=256 v=256
Sun Mar  1 23:09:47 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Mar  1 23:09:47 2015 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Sun Mar  1 23:09:47 2015 succeeded -> ifconfig_pool_set()
Sun Mar  1 23:09:47 2015 IFCONFIG POOL LIST
Sun Mar  1 23:09:47 2015 client1,10.8.0.4
Sun Mar  1 23:09:47 2015 Initialization Sequence Completed

strange thing is i cant see any Error in here so i dont know why the TLS_Error is here again... it was working earlier today...

maikcat

please post both (client & server) logs.

Michael.