[Solved]TLS Error:reading acknowledgement record from packet

VoidrayX

Hosting the server behind my dlink DIR-868L Router on my Windows 8.1 PC
Port forwarded UDP 1194
When I connect to the server using android i get

TLS Error: reading acknowledgement record from packet

Then I tried using static mini, I could connect however there was no internet access
Please Help! Im only know the the basic terms and stuff so try to keep the instructions simple.
Thanks!

Heres my server config

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"  # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh1024.pem"
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

And Client config

client
dev tun
proto udp
remote XXX.XXX.XX.48 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
comp-lzo
verb 3

Log

Sun Jul 12 20:21:02 2015 OpenVPN 2.3.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO]
[PKCS11] [IPv6] built on Jul  9 2015
Sun Jul 12 20:21:02 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Sun Jul 12 20:21:02 2015 NOTE: your local LAN uses the extremely common subnet a
ddress 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conf
licts if you connect to the VPN server from public locations such as internet ca
fes that use the same subnet.
Sun Jul 12 20:21:02 2015 Note: cannot open openvpn-status.log for WRITE
Sun Jul 12 20:21:02 2015 Note: cannot open ipp.txt for READ/WRITE
Sun Jul 12 20:21:02 2015 Diffie-Hellman initialized with 1024 bit key
Sun Jul 12 20:21:02 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sun Jul 12 20:21:02 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Jul 12 20:21:02 2015 open_tun, tt->ipv6=0
Sun Jul 12 20:21:02 2015 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{2CC68
BF1-045D-4F1B-B64E-1D5B14912043}.tap
Sun Jul 12 20:21:02 2015 TAP-Windows Driver Version 9.21
Sun Jul 12 20:21:02 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of
 10.8.0.1/255.255.255.252 on interface {2CC68BF1-045D-4F1B-B64E-1D5B14912043} [D
HCP-serv: 10.8.0.2, lease-time: 31536000]
Sun Jul 12 20:21:02 2015 Sleeping for 10 seconds...
Sun Jul 12 20:21:12 2015 NOTE: FlushIpNetTable failed on interface [44] {2CC68BF
1-045D-4F1B-B64E-1D5B14912043} (status=5) : Access is denied.
Sun Jul 12 20:21:12 2015 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255
.255.0 10.8.0.2
Sun Jul 12 20:21:12 2015 ROUTE: route addition failed using CreateIpForwardEntry
: Access is denied.   [status=5 if_index=44]
Sun Jul 12 20:21:12 2015 Route addition via IPAPI failed [adaptive]
Sun Jul 12 20:21:12 2015 Route addition fallback to route.exe
Sun Jul 12 20:21:12 2015 env_block: add PATH=C:\Windows\System32;C:\WINDOWS;C:\W
INDOWS\System32\Wbem
Sun Jul 12 20:21:12 2015 ERROR: Windows route add command failed [adaptive]: ret
urned error code 1
Sun Jul 12 20:21:12 2015 UDPv4 link local (bound): [undef]
Sun Jul 12 20:21:12 2015 UDPv4 link remote: [undef]
Sun Jul 12 20:21:12 2015 MULTI: multi_init called, r=256 v=256
Sun Jul 12 20:21:12 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Jul 12 20:21:12 2015 IFCONFIG POOL LIST
Sun Jul 12 20:21:12 2015 Initialization Sequence Completed
Sun Jul 12 20:21:33 2015 192.168.0.1:57837 TLS: Initial packet from [AF_INET]192
.168.0.1:57837, sid=2c8a2582 5527d384
Sun Jul 12 20:21:33 2015 192.168.0.103:57837 TLS: Initial packet from [AF_INET]1
92.168.0.103:57837, sid=2c8a2582 5527d384
Sun Jul 12 20:21:35 2015 192.168.0.103:57837 TLS Error: reading acknowledgement
record from packet
Sun Jul 12 20:21:40 2015 192.168.0.103:57837 TLS Error: reading acknowledgement
record from packet
Sun Jul 12 20:21:47 2015 192.168.0.103:57837 TLS Error: reading acknowledgement
record from packet
Sun Jul 12 20:22:03 2015 192.168.0.103:57837 TLS Error: reading acknowledgement
record from packet
Sun Jul 12 20:22:31 2015 192.168.0.1:33974 TLS: Initial packet from [AF_INET]192
.168.0.1:33974, sid=2bf071de 28bcbad4
Sun Jul 12 20:22:33 2015 192.168.0.103:57837 TLS Error: TLS key negotiation fail
ed to occur within 60 seconds (check your network connectivity)
Sun Jul 12 20:22:33 2015 192.168.0.103:57837 TLS Error: TLS handshake failed
Sun Jul 12 20:22:33 2015 192.168.0.103:57837 SIGUSR1[soft,tls-error] received, c
lient-instance restarting
Sun Jul 12 20:22:33 2015 192.168.0.1:57837 TLS Error: TLS key negotiation failed
 to occur within 60 seconds (check your network connectivity)
Sun Jul 12 20:22:33 2015 192.168.0.1:57837 TLS Error: TLS handshake failed
Sun Jul 12 20:22:33 2015 192.168.0.1:57837 SIGUSR1[soft,tls-error] received, cli
ent-instance restarting
Sun Jul 12 20:23:01 2015 read UDPv4: Connection reset by peer (WSAECONNRESET) (c
ode=10054)
Sun Jul 12 20:23:31 2015 192.168.0.1:33974 TLS Error: TLS key negotiation failed
 to occur within 60 seconds (check your network connectivity)
Sun Jul 12 20:23:31 2015 192.168.0.1:33974 TLS Error: TLS handshake failed
Sun Jul 12 20:23:31 2015 192.168.0.1:33974 SIGUSR1[soft,tls-error] received, cli
ent-instance restarting

Traffic

Did you run your server as administrator ?

VoidrayX

Traffic wroteDid you run your server as administrator ?

Hello, I couldnt find an option to run it as administrator so i did openvpn server.ovpn using the administrator CMD
Didnt seem to make a difference.
Heres the log anyway

C:\WINDOWS\system32>cd "C:\Program Files\OpenVPN\bin"

C:\Program Files\OpenVPN\bin>openvpn server.ovpn
Mon Jul 13 18:18:36 2015 OpenVPN 2.3.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO]
[PKCS11] [IPv6] built on Jul  9 2015
Mon Jul 13 18:18:36 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Mon Jul 13 18:18:36 2015 NOTE: your local LAN uses the extremely common subnet a
ddress 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conf
licts if you connect to the VPN server from public locations such as internet ca
fes that use the same subnet.
Mon Jul 13 18:18:36 2015 Diffie-Hellman initialized with 1024 bit key
Mon Jul 13 18:18:36 2015 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jul 13 18:18:36 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jul 13 18:18:36 2015 open_tun, tt->ipv6=0
Mon Jul 13 18:18:36 2015 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{2CC68
BF1-045D-4F1B-B64E-1D5B14912043}.tap
Mon Jul 13 18:18:36 2015 TAP-Windows Driver Version 9.21
Mon Jul 13 18:18:36 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of
 10.8.0.1/255.255.255.252 on interface {2CC68BF1-045D-4F1B-B64E-1D5B14912043} [D
HCP-serv: 10.8.0.2, lease-time: 31536000]
Mon Jul 13 18:18:36 2015 Sleeping for 10 seconds...
Mon Jul 13 18:18:46 2015 Successful ARP Flush on interface [44] {2CC68BF1-045D-4
F1B-B64E-1D5B14912043}
Mon Jul 13 18:18:46 2015 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255
.255.0 10.8.0.2
Mon Jul 13 18:18:46 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMet
ric1=20 and dwForwardType=4
Mon Jul 13 18:18:46 2015 Route addition via IPAPI succeeded [adaptive]
Mon Jul 13 18:18:46 2015 UDPv4 link local (bound): [undef]
Mon Jul 13 18:18:46 2015 UDPv4 link remote: [undef]
Mon Jul 13 18:18:46 2015 MULTI: multi_init called, r=256 v=256
Mon Jul 13 18:18:46 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jul 13 18:18:46 2015 IFCONFIG POOL LIST
Mon Jul 13 18:18:46 2015 Initialization Sequence Completed
Mon Jul 13 18:20:01 2015 192.168.0.1:53192 TLS: Initial packet from [AF_INET]192
.168.0.1:53192, sid=be4096f3 326efc01
Mon Jul 13 18:20:01 2015 192.168.0.103:53192 TLS: Initial packet from [AF_INET]1
92.168.0.103:53192, sid=be4096f3 326efc01
Mon Jul 13 18:20:01 2015 192.168.0.103:53192 TLS Error: reading acknowledgement
record from packet
Mon Jul 13 18:20:03 2015 192.168.0.103:53192 TLS Error: reading acknowledgement
record from packet
Mon Jul 13 18:20:07 2015 192.168.0.103:53192 TLS Error: reading acknowledgement
record from packet
Mon Jul 13 18:20:15 2015 192.168.0.103:53192 TLS Error: reading acknowledgement
record from packet
Mon Jul 13 18:20:20 2015 C:\WINDOWS\system32\route.exe DELETE 10.8.0.0 MASK 255.
255.255.0 10.8.0.2
Mon Jul 13 18:20:20 2015 Route deletion via IPAPI succeeded [adaptive]
Mon Jul 13 18:20:20 2015 Closing TUN/TAP interface
Mon Jul 13 18:20:20 2015 SIGTERM[hard,] received, process exiting

C:\Program Files\OpenVPN\bin>

maikcat

When I connect to the server using android i get

is your android located in the same network with your openvpn server?

Michael.

VoidrayX

maikcat wrote
When I connect to the server using android i get
is your android located in the same network with your openvpn server?

Michael.

It is when i try to test connection to the server. It worked when trying with a static server.

And these mod approval take sooooo long

maikcat

It is when i try to test connection to the server. It worked when trying with a static server.

avoid connecting to your routers wan ip while in the lan,

use a different internet connection for your tests.

And these mod approval take sooooo long

2 things about that,

your first posts only require approval , not ALL of them

i am the only active mod (hopefully i am not) with a full time job and a family , be patient.

Michael.

VoidrayX

maikcat wrote
It is when i try to test connection to the server. It worked when trying with a static server.
avoid connecting to your routers wan ip while in the lan,

use a different internet connection for your tests.

I tested over mobile data and it worked! Thanks alot for the help