TLS handshake failed, on 1 of 6 clients?

apeg

I have my VPN server running on a tomato router for a few months now without issue.

i have 6 clients that have been connecting smoothly, but just yesterday one client is unable to connect. Server side error log:

Sep 17 22:57:47 daemon.err openvpn[2389]: *.*.*.*:* TLS Error: TLS handshake failed
Sep 17 22:57:47 daemon.notice openvpn[2389]: *.*.*.*:* SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 17 22:57:50 daemon.err openvpn[2389]: *.*.*.*:* TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

That continuously runs over and over never connecting.

- At first i thought the ca.crt file was corrupted or something so i re-copied that over to the client, problem persisted
- Then i thought it could be the client cer or key so i edited the server (temporarily) to use user/pass auth exclusively, problem persisted

So i'm at the point where it must be the ca.crt file however the other 5 clients are running smooth as butter? through re-boots and server restarts the other 5 clients connect without issue.

The last thing google points me to is a firewall problem, but this client has a normal setup (average user setup)... wondering if if anyone has tips on where i should look first, client router...?

Thanks,

Traffic

apeg wroteif anyone has tips on where i should look first

Your complete (sanitized) server and client logs at --verb 4 will help.

apeg

Will do Traffic,

Since posting i have learned it was the clients router... the problem is it was a standard $50 bestbuy router that was working for months.

Clearly something went on the router but i have asked the client if i can have the broken router. All other "tasks" from the router were running perfect. I find it hard to believe that a TLS handshake was the first thing to pop but once i get it ill run tests myself and post logs and/or (hopefully) findings.

Cheers,