New to openvpn, need some help please.

doox00

Hey all,

I am running Elementary OS, I have openvpn installed.. I followed the instructions here on how to get it setup and working.

https://www.linux.com/learn/tutorials/457103-install-and-configure-openvpn-server-on-linux

The server side seems to be installed and running (how can I check for sure?) This is the log on the client (windows 8.1). i am testing this on the same network right now 192.168.1.x ip's. What should I be looking at to get this working? thanks all!

Wed Apr 29 10:33:01 2015 Warning: cannot open --log file: C:\Program Files\OpenVPN\log\client.log: The process cannot access the file because it is being used by another process.   (errno=32)
Wed Apr 29 10:33:01 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Wed Apr 29 10:33:01 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Wed Apr 29 10:33:01 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Apr 29 10:33:01 2015 Need hold release from management interface, waiting...
Wed Apr 29 10:33:02 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Apr 29 10:33:02 2015 MANAGEMENT: CMD 'state on'
Wed Apr 29 10:33:02 2015 MANAGEMENT: CMD 'log all on'
Wed Apr 29 10:33:02 2015 MANAGEMENT: CMD 'hold off'
Wed Apr 29 10:33:02 2015 MANAGEMENT: CMD 'hold release'
Wed Apr 29 10:33:02 2015 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Apr 29 10:33:02 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 10:33:02 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 10:33:02 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Apr 29 10:33:02 2015 UDPv4 link local: [undef]
Wed Apr 29 10:33:02 2015 UDPv4 link remote: [AF_INET]192.168.1.180:1203
Wed Apr 29 10:33:02 2015 MANAGEMENT: >STATE:1430317982,WAIT,,,
Wed Apr 29 10:34:03 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 29 10:34:03 2015 TLS Error: TLS handshake failed
Wed Apr 29 10:34:03 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 29 10:34:03 2015 MANAGEMENT: >STATE:1430318043,RECONNECTING,tls-error,,
Wed Apr 29 10:34:03 2015 Restart pause, 2 second(s)
Wed Apr 29 10:34:05 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Apr 29 10:34:05 2015 UDPv4 link local: [undef]
Wed Apr 29 10:34:05 2015 UDPv4 link remote: [AF_INET]192.168.1.180:1203
Wed Apr 29 10:34:05 2015 MANAGEMENT: >STATE:1430318045,WAIT,,,
Wed Apr 29 10:35:05 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 29 10:35:05 2015 TLS Error: TLS handshake failed
Wed Apr 29 10:35:05 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 29 10:35:05 2015 MANAGEMENT: >STATE:1430318105,RECONNECTING,tls-error,,
Wed Apr 29 10:35:05 2015 Restart pause, 2 second(s)
Wed Apr 29 10:35:07 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Apr 29 10:35:07 2015 UDPv4 link local: [undef]
Wed Apr 29 10:35:07 2015 UDPv4 link remote: [AF_INET]192.168.1.180:1203
Wed Apr 29 10:35:07 2015 MANAGEMENT: >STATE:1430318107,WAIT,,,
Wed Apr 29 10:36:07 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 29 10:36:07 2015 TLS Error: TLS handshake failed
Wed Apr 29 10:36:07 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 29 10:36:07 2015 MANAGEMENT: >STATE:1430318167,RECONNECTING,tls-error,,
Wed Apr 29 10:36:07 2015 Restart pause, 2 second(s)
Wed Apr 29 10:36:09 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Apr 29 10:36:09 2015 UDPv4 link local: [undef]
Wed Apr 29 10:36:09 2015 UDPv4 link remote: [AF_INET]192.168.1.180:1203
Wed Apr 29 10:36:09 2015 MANAGEMENT: >STATE:1430318169,WAIT,,,
Wed Apr 29 10:37:09 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Apr 29 10:37:09 2015 TLS Error: TLS handshake failed
Wed Apr 29 10:37:09 2015 SIGUSR1[soft,tls-error] received, process restarting
Wed Apr 29 10:37:09 2015 MANAGEMENT: >STATE:1430318229,RECONNECTING,tls-error,,
Wed Apr 29 10:37:09 2015 Restart pause, 2 second(s)
Wed Apr 29 10:37:11 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Apr 29 10:37:11 2015 UDPv4 link local: [undef]
Wed Apr 29 10:37:11 2015 UDPv4 link remote: [AF_INET]192.168.1.180:1203
Wed Apr 29 10:37:11 2015 MANAGEMENT: >STATE:1430318231,WAIT,,,

maikcat

please post configs/logs from both sides.

Michael.

doox00

I have kind of changed directions and maybe some of you will have some direction for me.

This is what I am looking to do. I live in the US, I have an apartment in Canada because I play poker (hopefully full time soon if I can get this setup) for as of now a supplemental income. Eventually if my wife and I are successful enough we will move somewhere more permanent and not have to deal with this, but in the meantime....

When I am at our home in the US I want to be able to play online poker still. I have a few ideas on how to do this.. One would be get a kvm switch with remote access and be done with it. The poker client would not know I am accessing the computer remotely this way. I have read the Poker clients do a lot of checking to make sure no remote desktop type stuff or vpn type stuff is going on. Being caught doing this is a ban on your account, which is not an option for us. (Btw, this is not illegal, online poker is legal in the US, just using US banking to transfer funds is illegal, which is why I have a Canadian bank account).

I was wondering if I were to setup a site to site hardware based VPN, so when home in the US it will appear our computers are part of the same network in Canada. I would have all traffic route through the VPN and use the Canadian internet access/ip address. With this option is it possible the client could detect the traffic is travelling through US internet connection to get to the Canadian network? And if the client software itself is fooled would if someone was looking directly be fooled or is it possible to detect this type of scenario? If its at all possible I will just can the idea of the site to site and stick with a remote access kvm type switch. Would be nice to load poker client / poker tracker / Huds etc on my local pc though instead of doing it through kvm switch, not sure how much lag I would experience.

Thanks all for any suggestions.