TLS key negotiation failed to occur within 60 seconds

Anisur

We are testing OpenVPN access server (192.168.10.110) with Linux OpenVPN client on redhat Linux (192.168.10.97); on this client we get following error:
Thu Oct 1 12:13:11 2015 us=94746 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Oct 1 12:13:11 2015 us=94797 TLS Error: TLS handshake failed
Thu Oct 1 12:13:11 2015 us=94877 TCP/UDP: Closing socket
Thu Oct 1 12:13:11 2015 us=94929 SIGUSR1[soft,tls-error] received, process restarting

maikcat

hi there,

first you dont need to post 4 times the same thing....
i will approve it as soon as i see it...

also server logs reveal something?
can you switch to tcp?
please post configs.

Michael.

Anisur

Client.conf file:

client
dev tun
proto tcp
proto udp
remote 192.168.10.110
port 1194
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca ca.crt
;cert dbtest.crt
;key dbtest.key
auth-user-pass
remote-cert-tls server
verb 4

Anisur

After switching to tcp:
Fri Oct 2 10:50:30 2015 us=754694 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:3 ]
Fri Oct 2 10:50:30 2015 us=754757 Socket Buffers: R=[87380->131072] S=[16384->131072]
Fri Oct 2 10:50:30 2015 us=754819 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:12 ET:0 EL:3 ]
Fri Oct 2 10:50:30 2015 us=754841 Local Options String: 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Oct 2 10:50:30 2015 us=754850 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Oct 2 10:50:30 2015 us=754872 Local Options hash (VER=V4): 'db02a8f8'
Fri Oct 2 10:50:30 2015 us=754886 Expected Remote Options hash (VER=V4): '7e068940'
Fri Oct 2 10:50:30 2015 us=755192 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Fri Oct 2 10:50:30 2015 us=755217 Attempting to establish TCP connection with [AF_INET]192.168.10.110:443 [nonblock]
Fri Oct 2 10:50:31 2015 us=755374 TCP connection established with [AF_INET]192.168.10.110:443
Fri Oct 2 10:50:31 2015 us=755415 TCPv4_CLIENT link local: [undef]
Fri Oct 2 10:50:31 2015 us=755426 TCPv4_CLIENT link remote: [AF_INET]192.168.10.110:443
Fri Oct 2 10:50:31 2015 us=756149 Connection reset, restarting [0]
Fri Oct 2 10:50:31 2015 us=756192 TCP/UDP: Closing socket
Fri Oct 2 10:50:31 2015 us=756240 SIGUSR1[soft,connection-reset] received, process restarting
Fri Oct 2 10:50:31 2015 us=756256 Restart pause, 5 second(s)
^CFri Oct 2 10:50:34 2015 us=434118 SIGINT[hard,init_instance] received, process exiting

maikcat

server logs/config please...?

Michael.