TLS ERROR

ankuropenvpn

Hi All,

I have following setup-

1 .ubuntu 12.04 client server
2. openvpn server 2.0
3. openvpn client

when i m trying to connect TLS error is displaying..

Can anyone kindly help here..the log is provided below -

openvpn --config /etc/openvpn/client.conf
Thu Jan 7 11:53:06 2016 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Thu Jan 7 11:53:06 2016 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 7 11:53:06 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Enter Private Key Password:
Thu Jan 7 11:53:09 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jan 7 11:53:09 2016 WARNING: file '/etc/openvpn/easy-rsa/newpc.key' is group or others accessible
Thu Jan 7 11:53:09 2016 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 7 11:53:09 2016 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Jan 7 11:53:09 2016 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 7 11:53:09 2016 Local Options hash (VER=V4): '3514370b'
Thu Jan 7 11:53:09 2016 Expected Remote Options hash (VER=V4): '239669a8'
Thu Jan 7 11:53:09 2016 UDPv4 link local: [undef]
Thu Jan 7 11:53:09 2016 UDPv4 link remote: [AF_INET]192.168.4.1:1194
Thu Jan 7 11:54:09 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 7 11:54:09 2016 TLS Error: TLS handshake failed
Thu Jan 7 11:54:09 2016 TCP/UDP: Closing socket
Thu Jan 7 11:54:09 2016 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 7 11:54:09 2016 Restart pause, 2 second(s)
Thu Jan 7 11:54:11 2016 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more

Thanks

ankur

ankuropenvpn

Below are the updated client and server logs..please help if someone is having an idea

updated client log -

root@anite3:/etc/openvpn# openvpn --config /etc/openvpn/client.conf
Sat Jan 9 15:59:33 2016 OpenVPN 2.2.1 i686-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Sat Jan 9 15:59:33 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Enter Private Key Password:
Sat Jan 9 15:59:36 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Jan 9 15:59:36 2016 WARNING: file '/home/anite3/Desktop/certificate/userx.key' is group or others accessible
Sat Jan 9 15:59:36 2016 ******* WARNING *******: null cipher specified, no encryption will be used
Sat Jan 9 15:59:36 2016 LZO compression initialized
Sat Jan 9 15:59:36 2016 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Jan 9 15:59:36 2016 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sat Jan 9 15:59:36 2016 Data Channel MTU parms [ L:1560 D:1450 EF:28 EB:135 ET:32 EL:0 AF:14/28 ]
Sat Jan 9 15:59:36 2016 Local Options hash (VER=V4): '9b72a413'
Sat Jan 9 15:59:36 2016 Expected Remote Options hash (VER=V4): 'd1a900cb'
Sat Jan 9 15:59:36 2016 Attempting to establish TCP connection with [AF_INET]192.168.4.1:443 [nonblock]
Sat Jan 9 15:59:37 2016 TCP connection established with [AF_INET]192.168.4.1:443
Sat Jan 9 15:59:37 2016 TCPv4_CLIENT link local: [undef]
Sat Jan 9 15:59:37 2016 TCPv4_CLIENT link remote: [AF_INET]192.168.4.1:443
Sat Jan 9 15:59:37 2016 Connection reset, restarting [0]
Sat Jan 9 15:59:37 2016 TCP/UDP: Closing socket
Sat Jan 9 15:59:37 2016 SIGUSR1[soft,connection-reset] received, process restarting
Sat Jan 9 15:59:37 2016 Restart pause, 5 second(s)
Sat Jan 9 15:59:42 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jan 9 15:59:42 2016 Re-using SSL/TLS context
Sat Jan 9 15:59:42 2016 LZO compression initialized

Updated Server log -

2016-01-09 13:47:25+0545 [-] WEB OUT: '2016-01-09 13:47:25+0545 [-] *** GARBAGE usage: 0 objects, counts=(233, 11, 9)'
2016-01-09 16:14:36+0545 [-] OVPN 0 OUT: 'Sat Jan 9 10:29:36 2016 TCP connection established with [AF_INET]192.168.4.3:44004'
2016-01-09 16:14:37+0545 [-] OVPN 0 OUT: 'Sat Jan 9 10:29:37 2016 192.168.4.3:44004 TLS: Initial packet from [AF_INET]192.168.4.3:44004, sid=43f7a16a 273599d9'
2016-01-09 16:14:37+0545 [-] OVPN 0 OUT: 'Sat Jan 9 10:29:37 2016 192.168.4.3:44004 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]192.168.4.3:44004'
2016-01-09 16:14:37+0545 [-] OVPN 0 OUT: 'Sat Jan 9 10:29:37 2016 192.168.4.3:44004 Fatal TLS error (check_tls_errors_co), restarting'
2016-01-09 16:14:37+0545 [-] OVPN 0 OUT: 'Sat Jan 9 10:29:37 2016 192.168.4.3:44004 SIGUSR1[soft,tls-error] received, client-instance restarting'
2016-01-09 16:14:42+0545 [-] OVPN 1 OUT: 'Sat Jan 9 10:29:42 2016 TCP connection established with [AF_INET]192.168.4.3:44005'
2016-01-09 16:14:43+0545 [-] OVPN 1 OUT: 'Sat Jan 9 10:29:43 2016 192.168.4.3:44005 TLS: Initial packet from [AF_INET]192.168.4.3:44005, sid=1a2eb740 954f6b13'
2016-01-09 16:14:43+0545 [-] OVPN 1 OUT: 'Sat Jan 9 10:29:43 2016 192.168.4.3:44005 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]192.168.4.3:44005'
2016-01-09 16:14:43+0545 [-] OVPN 1 OUT: 'Sat Jan 9 10:29:43 2016 192.168.4.3:44005 Fatal TLS error (check_tls_errors_co), restarting'
2016-01-09 16:14:43+0545 [-] OVPN 1 OUT: 'Sat Jan 9 10:29:43 2016 192.168.4.3:44005 SIGUSR1[soft,tls-error] received, client-instance restarting'

Thanks.
ankur

Traffic

Please post your server & client configs.