Hi,
I am using an Android OpenVPN client and a Windows 7 OpenVPN client to attempt to connect into an OpenVPN server (server is on FreeBSD 11 via RaspberryPi Model B). Attached below are my server.conf and client.ovpn files and also the FreeBSD server sys log.
I am seeing some TLS interaction from the /var/log/messages on the FreeBSD sys logs and everytime it hits the TLS Key Exchange portion, the sys logs on the server and the client logs shows that it fails. That should indicate the availability of the service running on the server and the server able to communicate to the client ?
How should I fix the problem with my OpenVPN server ?
/var/log.messages:
Sep 19 02:00:22 rpi-b openvpn[656]: 192.168.0.1:61956 TLS: Initial packet from [AF_INET]192.168.0.1:61956, sid=28d81a9b b1a4c1b7
Sep 19 02:01:22 rpi-b openvpn[656]: 192.168.0.1:61956 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 19 02:01:22 rpi-b openvpn[656]: 192.168.0.1:61956 TLS Error: TLS handshake failed
Sep 19 02:01:22 rpi-b openvpn[656]: 192.168.0.1:61956 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 19 02:01:24 rpi-b openvpn[656]: 192.168.0.1:61959 TLS: Initial packet from [AF_INET]192.168.0.1:61959, sid=9523f81c 571653bd
Sep 19 02:02:24 rpi-b openvpn[656]: 192.168.0.1:61959 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 19 02:02:24 rpi-b openvpn[656]: 192.168.0.1:61959 TLS Error: TLS handshake failed
Sep 19 02:02:24 rpi-b openvpn[656]: 192.168.0.1:61959 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 19 02:02:26 rpi-b openvpn[656]: 192.168.0.1:61963 TLS: Initial packet from [AF_INET]192.168.0.1:61963, sid=cfc59bdc 8f8fd3a4
server.conf:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
duplicate-cn
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 6
client.ovpn
client
dev tun
proto udp
remote <a valid ip-adddress> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert testClient.crt
key testClient.key
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
verb 3
/var/log/messages:
Sep 19 02:19:35 rpi-b openvpn[1608]: MULTI: multi_create_instance called
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Re-using SSL/TLS context
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 LZO compression initialized
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:3 ]
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Local Options hash (VER=V4): 'a8f55717'
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 Expected Remote Options hash (VER=V4): '22188c5b'
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 READ [14] from [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 TLS: Initial packet from [AF_INET]192.168.0.1:57666, sid=eec1bdec 4206b569
Sep 19 02:19:35 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 WRITE [26] to [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sep 19 02:19:37 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:19:41 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:19:49 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:20:05 rpi-b openvpn[1608]: 192.168.0.1:57666 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:57666: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:20:35 rpi-b openvpn[1608]: 192.168.0.1:57666 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 19 02:20:35 rpi-b openvpn[1608]: 192.168.0.1:57666 TLS Error: TLS handshake failed
Sep 19 02:20:35 rpi-b openvpn[1608]: 192.168.0.1:57666 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 19 02:20:37 rpi-b openvpn[1608]: MULTI: multi_create_instance called
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Re-using SSL/TLS context
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 LZO compression initialized
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:3 ]
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Local Options hash (VER=V4): 'a8f55717'
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 Expected Remote Options hash (VER=V4): '22188c5b'
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 READ [14] from [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 TLS: Initial packet from [AF_INET]192.168.0.1:49583, sid=f1143ad6 195c0643
Sep 19 02:20:37 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 WRITE [26] to [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sep 19 02:20:39 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:20:43 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:20:51 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:21:07 rpi-b openvpn[1608]: 192.168.0.1:49583 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:49583: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:21:37 rpi-b openvpn[1608]: 192.168.0.1:49583 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 19 02:21:37 rpi-b openvpn[1608]: 192.168.0.1:49583 TLS Error: TLS handshake failed
Sep 19 02:21:37 rpi-b openvpn[1608]: 192.168.0.1:49583 SIGUSR1[soft,tls-error] received, client-instance restarting
Sep 19 02:21:39 rpi-b openvpn[1608]: MULTI: multi_create_instance called
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Re-using SSL/TLS context
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 LZO compression initialized
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:3 ]
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Local Options hash (VER=V4): 'a8f55717'
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 Expected Remote Options hash (VER=V4): '22188c5b'
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 READ [14] from [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 TLS: Initial packet from [AF_INET]192.168.0.1:64736, sid=6dd69a95 f75e08e5
Sep 19 02:21:39 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 WRITE [26] to [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sep 19 02:21:41 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:21:46 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:21:54 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:22:10 rpi-b openvpn[1608]: 192.168.0.1:64736 UDPv4 WRITE [14] to [AF_INET]192.168.0.1:64736: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sep 19 02:22:39 rpi-b openvpn[1608]: 192.168.0.1:64736 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 19 02:22:39 rpi-b openvpn[1608]: 192.168.0.1:64736 TLS Error: TLS handshake failed
Sep 19 02:22:39 rpi-b openvpn[1608]: 192.168.0.1:64736 SIGUSR1[soft,tls-error] received, client-instance restarting
