Windows 10 Home Problem

mightymartian

I am attempting to get OpenVPN 2.3.10 (32 bit) with TAP driver 9.21.1 in client mode running on a Windows 10 Home machine. The OpenVPN server configuration I'm using has been in use for two years and has a dozen other machines, four or five of which are Windows 10 Pro machines, connecting without an issue. With this particular machine, it seems to stall out during or after the certificate authentication stage. I have created new certs, as well as testing certificates that I know work on other workstations.

This is the client configuration:

client
dev tun
proto udp
remote www.xxx.yyy.zzz 20000
resolv-retry infinite
nobind
persist-key
persist-tun
keepalive 10 60
ping-timer-rem
ca pubserver/keys/ca.crt
cert pubserver/keys/client1.crt
key pubserver/keys/client1.key
comp-lzo
status pubserver/pubserver.log
verb 5
dhcp-renew
register-dns
route 10.0.4.0 255.255.252.0
route 10.0.8.0 255.255.252.0

This is the server config:

port 20000
proto udp
dev tun1
ca pubserver/keys/ca.crt
cert pubserver/keys/server.crt
key pubserver/keys/server.key
dh pubserver/keys/dh4096.pem
crl-verify pubserver/keys/crl.pem
server 10.0.14.0 255.255.255.0
ifconfig-pool-persist pubserver/ipp.txt
push "route 10.0.0.0 255.255.252.0"
push "route 10.0.4.0 255.255.252.0"
push "route 10.0.8.0 255.255.252.0"
push "dhcp-option DNS 10.0.0.8"
push "dhcp-option DNS 10.0.4.3"
push "dhcp-option DNS 10.0.8.5"
client-config-dir pubserver/ccd
client-to-client
keepalive 5 10

Finally, this is what the log shows:

Mon Jan 04 11:00:49 2016 us=735254 OpenVPN 2.3.10 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan 4 2016
Mon Jan 04 11:00:49 2016 us=735254 Windows version 6.2 (Windows 8 or greater)
Mon Jan 04 11:00:49 2016 us=735254 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Mon Jan 04 11:00:49 2016 us=750881 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 04 11:00:50 2016 us=79161 LZO compression initialized
Mon Jan 04 11:00:50 2016 us=79161 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Jan 04 11:00:50 2016 us=79161 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jan 04 11:00:50 2016 us=94649 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Jan 04 11:00:50 2016 us=94649 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jan 04 11:00:50 2016 us=94649 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jan 04 11:00:50 2016 us=94649 Local Options hash (VER=V4): '41690919'
Mon Jan 04 11:00:50 2016 us=94649 Expected Remote Options hash (VER=V4): '530fdded'
Mon Jan 04 11:00:50 2016 us=110274 UDPv4 link local: [undef]
Mon Jan 04 11:00:50 2016 us=110274 UDPv4 link remote: [AF_INET]x.x.x.x:20000
WRMon Jan 04 11:00:50 2016 us=125899 TLS: Initial packet from [AF_INET]x.x.x.x:20000, sid=4888e62d 7946f3b6
WWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRMon Jan 04 11:00:51 2016 us=750977 VERIFY OK: depth=1, C=CA, ST=BC, L=PortAlberni, O=IWT, OU=Staff, CN=IWT CA, emailAddress=techadmin@avemployment.ca
Mon Jan 04 11:00:51 2016 us=750977 VERIFY OK: depth=0, C=CA, ST=BC, L=PortAlberni, O=IWT, OU=Staff, CN=server, emailAddress=techadmin@avemployment.ca
WRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWWWWWWWWWWMon Jan 04 11:01:50 2016 us=813471 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 04 11:01:50 2016 us=813471 TLS Error: TLS handshake failed
Mon Jan 04 11:01:50 2016 us=813471 TCP/UDP: Closing socket

Traffic

mightymartian wroteMon Jan 04 11:01:50 2016 us=813471 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 04 11:01:50 2016 us=813471 TLS Error: TLS handshake failed
Mon Jan 04 11:01:50 2016 us=813471 TCP/UDP: Closing socket

Please post your server log showing a connection attempt from this client.