TLS fail

lidagon

Hello,

My server conf:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
#server igmg.cloudapp.net 255.255.255.0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#push "dhcp-option DNS 10.8.0.1"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log

My client conf:

ns-cert-type server
;remote-cert-tls server

;tls-auth ta.key 0
;tls-auth /etc/openvpn/ta.key 0

;cipher x

comp-lzo


verb 3

;mute 20

<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
    ...
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
</key>

The .ovpn is Unified file, because I mainly followed this guideline https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04

Now, I tried literally everything I could, so first version of my server configuration was identical to above tutorial. In this post its the recent one.

I'm always getting this output:

Mon Jan 25 22:19:17 2016 us=293395 Current Parameter Settings:
Mon Jan 25 22:19:17 2016 us=294396   config = 'igmg.ovpn'
Mon Jan 25 22:19:17 2016 us=294396   mode = 0
Mon Jan 25 22:19:17 2016 us=294396   show_ciphers = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   show_digests = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   show_engines = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   genkey = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   key_pass_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   show_tls_ciphers = DISABLED
Mon Jan 25 22:19:17 2016 us=294396 Connection profiles [default]:
Mon Jan 25 22:19:17 2016 us=294396   proto = udp
Mon Jan 25 22:19:17 2016 us=294396   local = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   local_port = 0
Mon Jan 25 22:19:17 2016 us=294396   remote = 'igmg.cloudapp.net'
Mon Jan 25 22:19:17 2016 us=294396   remote_port = 1194
Mon Jan 25 22:19:17 2016 us=294396   remote_float = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   bind_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   bind_local = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   connect_retry_seconds = 5
Mon Jan 25 22:19:17 2016 us=294396   connect_timeout = 10
Mon Jan 25 22:19:17 2016 us=294396   connect_retry_max = 0
Mon Jan 25 22:19:17 2016 us=294396   socks_proxy_server = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   socks_proxy_port = 0
Mon Jan 25 22:19:17 2016 us=294396   socks_proxy_retry = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   tun_mtu = 1500
Mon Jan 25 22:19:17 2016 us=294396   tun_mtu_defined = ENABLED
Mon Jan 25 22:19:17 2016 us=294396   link_mtu = 1500
Mon Jan 25 22:19:17 2016 us=294396   link_mtu_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   tun_mtu_extra = 0
Mon Jan 25 22:19:17 2016 us=294396   tun_mtu_extra_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   mtu_discover_type = -1
Mon Jan 25 22:19:17 2016 us=294396   fragment = 0
Mon Jan 25 22:19:17 2016 us=294396   mssfix = 1450
Mon Jan 25 22:19:17 2016 us=294396   explicit_exit_notification = 0
Mon Jan 25 22:19:17 2016 us=294396 Connection profiles END
Mon Jan 25 22:19:17 2016 us=294396   remote_random = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   ipchange = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   dev = 'tun'
Mon Jan 25 22:19:17 2016 us=294396   dev_type = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   dev_node = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   lladdr = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   topology = 1
Mon Jan 25 22:19:17 2016 us=294396   tun_ipv6 = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_local = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_remote_netmask = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_noexec = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_nowarn = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_ipv6_local = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_ipv6_netbits = 0
Mon Jan 25 22:19:17 2016 us=294396   ifconfig_ipv6_remote = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=294396   shaper = 0
Mon Jan 25 22:19:17 2016 us=294396   mtu_test = 0
Mon Jan 25 22:19:17 2016 us=294396   mlock = DISABLED
Mon Jan 25 22:19:17 2016 us=294396   keepalive_ping = 0
Mon Jan 25 22:19:17 2016 us=294396   keepalive_timeout = 0
Mon Jan 25 22:19:17 2016 us=294396   inactivity_timeout = 0
Mon Jan 25 22:19:17 2016 us=294396   ping_send_timeout = 0
Mon Jan 25 22:19:17 2016 us=294396   ping_rec_timeout = 0
Mon Jan 25 22:19:17 2016 us=294396   ping_rec_timeout_action = 0
Mon Jan 25 22:19:17 2016 us=294396   ping_timer_remote = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   remap_sigusr1 = 0
Mon Jan 25 22:19:17 2016 us=295394   persist_tun = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   persist_local_ip = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   persist_remote_ip = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   persist_key = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   passtos = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   resolve_retry_seconds = 1000000000
Mon Jan 25 22:19:17 2016 us=295394   username = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   groupname = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   chroot_dir = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   cd_dir = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   writepid = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   up_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   down_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   down_pre = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   up_restart = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   up_delay = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   daemon = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   inetd = 0
Mon Jan 25 22:19:17 2016 us=295394   log = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   suppress_timestamps = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   nice = 0
Mon Jan 25 22:19:17 2016 us=295394   verbosity = 4
Mon Jan 25 22:19:17 2016 us=295394   mute = 0
Mon Jan 25 22:19:17 2016 us=295394   gremlin = 0
Mon Jan 25 22:19:17 2016 us=295394   status_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   status_file_version = 1
Mon Jan 25 22:19:17 2016 us=295394   status_file_update_freq = 60
Mon Jan 25 22:19:17 2016 us=295394   occ = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   rcvbuf = 0
Mon Jan 25 22:19:17 2016 us=295394   sndbuf = 0
Mon Jan 25 22:19:17 2016 us=295394   sockflags = 0
Mon Jan 25 22:19:17 2016 us=295394   fast_io = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   lzo = 7
Mon Jan 25 22:19:17 2016 us=295394   route_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   route_default_gateway = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   route_default_metric = 0
Mon Jan 25 22:19:17 2016 us=295394   route_noexec = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   route_delay = 5
Mon Jan 25 22:19:17 2016 us=295394   route_delay_window = 30
Mon Jan 25 22:19:17 2016 us=295394   route_delay_defined = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   route_nopull = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   route_gateway_via_dhcp = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   max_routes = 100
Mon Jan 25 22:19:17 2016 us=295394   allow_pull_fqdn = DISABLED
Mon Jan 25 22:19:17 2016 us=295394   management_addr = '127.0.0.1'
Mon Jan 25 22:19:17 2016 us=295394   management_port = 25340
Mon Jan 25 22:19:17 2016 us=295394   management_user_pass = 'stdin'
Mon Jan 25 22:19:17 2016 us=295394   management_log_history_cache = 250
Mon Jan 25 22:19:17 2016 us=295394   management_echo_buffer_size = 100
Mon Jan 25 22:19:17 2016 us=295394   management_write_peer_info_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   management_client_user = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   management_client_group = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   management_flags = 6
Mon Jan 25 22:19:17 2016 us=295394   shared_secret_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=295394   key_direction = 0
Mon Jan 25 22:19:17 2016 us=295394   ciphername_defined = ENABLED
Mon Jan 25 22:19:17 2016 us=295394   ciphername = 'BF-CBC'
Mon Jan 25 22:19:17 2016 us=295394   authname_defined = ENABLED
Mon Jan 25 22:19:17 2016 us=296394   authname = 'SHA1'
Mon Jan 25 22:19:17 2016 us=296394   prng_hash = 'SHA1'
Mon Jan 25 22:19:17 2016 us=296394   prng_nonce_secret_len = 16
Mon Jan 25 22:19:17 2016 us=296394   keysize = 0
Mon Jan 25 22:19:17 2016 us=296394   engine = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   replay = ENABLED
Mon Jan 25 22:19:17 2016 us=296394   mute_replay_warnings = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   replay_window = 64
Mon Jan 25 22:19:17 2016 us=296394   replay_time = 15
Mon Jan 25 22:19:17 2016 us=296394   packet_id_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   use_iv = ENABLED
Mon Jan 25 22:19:17 2016 us=296394   test_crypto = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   tls_server = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   tls_client = ENABLED
Mon Jan 25 22:19:17 2016 us=296394   key_method = 2
Mon Jan 25 22:19:17 2016 us=296394   ca_file = '[[INLINE]]'
Mon Jan 25 22:19:17 2016 us=296394   ca_path = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   dh_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   cert_file = '[[INLINE]]'
Mon Jan 25 22:19:17 2016 us=296394   extra_certs_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   priv_key_file = '[[INLINE]]'
Mon Jan 25 22:19:17 2016 us=296394   pkcs12_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   cryptoapi_cert = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   cipher_list = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   tls_verify = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   tls_export_cert = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   verify_x509_type = 0
Mon Jan 25 22:19:17 2016 us=296394   verify_x509_name = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   crl_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   ns_cert_type = 1
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_ku[i] = 0
Mon Jan 25 22:19:17 2016 us=296394   remote_cert_eku = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   ssl_flags = 0
Mon Jan 25 22:19:17 2016 us=296394   tls_timeout = 2
Mon Jan 25 22:19:17 2016 us=296394   renegotiate_bytes = 0
Mon Jan 25 22:19:17 2016 us=296394   renegotiate_packets = 0
Mon Jan 25 22:19:17 2016 us=296394   renegotiate_seconds = 3600
Mon Jan 25 22:19:17 2016 us=296394   handshake_window = 60
Mon Jan 25 22:19:17 2016 us=296394   transition_window = 3600
Mon Jan 25 22:19:17 2016 us=296394   single_session = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   push_peer_info = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   tls_exit = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   tls_auth_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=296394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_protected_authentication = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_private_mode = 00000000
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_cert_private = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_pin_cache_period = -1
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_id = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=297394   pkcs11_id_management = DISABLED
Mon Jan 25 22:19:17 2016 us=297394   server_network = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=297394   server_netmask = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   server_network_ipv6 = ::
Mon Jan 25 22:19:17 2016 us=298396   server_netbits_ipv6 = 0
Mon Jan 25 22:19:17 2016 us=298396   server_bridge_ip = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   server_bridge_netmask = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   server_bridge_pool_start = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   server_bridge_pool_end = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_start = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_end = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_netmask = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_pool_persist_refresh_freq = 600
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_ipv6_pool_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_ipv6_pool_base = ::
Mon Jan 25 22:19:17 2016 us=298396   ifconfig_ipv6_pool_netbits = 0
Mon Jan 25 22:19:17 2016 us=299396   n_bcast_buf = 256
Mon Jan 25 22:19:17 2016 us=299396   tcp_queue_limit = 64
Mon Jan 25 22:19:17 2016 us=299396   real_hash_size = 256
Mon Jan 25 22:19:17 2016 us=299396   virtual_hash_size = 256
Mon Jan 25 22:19:17 2016 us=299396   client_connect_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   learn_address_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   client_disconnect_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   client_config_dir = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   ccd_exclusive = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   tmp_dir = 'C:\Users\Goran\AppData\Local\Temp\'
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_local = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_ipv6_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_ipv6_local = ::/0
Mon Jan 25 22:19:17 2016 us=299396   push_ifconfig_ipv6_remote = ::
Mon Jan 25 22:19:17 2016 us=299396   enable_c2c = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   duplicate_cn = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   cf_max = 0
Mon Jan 25 22:19:17 2016 us=299396   cf_per = 0
Mon Jan 25 22:19:17 2016 us=299396   max_clients = 1024
Mon Jan 25 22:19:17 2016 us=299396   max_routes_per_client = 256
Mon Jan 25 22:19:17 2016 us=299396   auth_user_pass_verify_script = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   auth_user_pass_verify_script_via_file = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   client = ENABLED
Mon Jan 25 22:19:17 2016 us=299396   pull = ENABLED
Mon Jan 25 22:19:17 2016 us=299396   auth_user_pass_file = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   show_net_up = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   route_method = 0
Mon Jan 25 22:19:17 2016 us=299396   block_outside_dns = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   ip_win32_defined = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   ip_win32_type = 3
Mon Jan 25 22:19:17 2016 us=299396   dhcp_masq_offset = 0
Mon Jan 25 22:19:17 2016 us=299396   dhcp_lease_time = 31536000
Mon Jan 25 22:19:17 2016 us=299396   tap_sleep = 0
Mon Jan 25 22:19:17 2016 us=299396   dhcp_options = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   dhcp_renew = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   dhcp_pre_release = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   dhcp_release = DISABLED
Mon Jan 25 22:19:17 2016 us=299396   domain = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   netbios_scope = '[UNDEF]'
Mon Jan 25 22:19:17 2016 us=299396   netbios_node_type = 0
Mon Jan 25 22:19:17 2016 us=299396   disable_nbt = DISABLED
Mon Jan 25 22:19:17 2016 us=299396 OpenVPN 2.3.10 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan  4 2016
Mon Jan 25 22:19:17 2016 us=299396 Windows version 6.2 (Windows 8 or greater)
Mon Jan 25 22:19:17 2016 us=299396 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Mon Jan 25 22:19:17 2016 us=300395 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jan 25 22:19:17 2016 us=300395 Need hold release from management interface, waiting...
Mon Jan 25 22:19:17 2016 us=318399 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jan 25 22:19:17 2016 us=421192 MANAGEMENT: CMD 'state on'
Mon Jan 25 22:19:17 2016 us=421192 MANAGEMENT: CMD 'log all on'
Mon Jan 25 22:19:17 2016 us=645204 MANAGEMENT: CMD 'hold off'
Mon Jan 25 22:19:17 2016 us=648205 MANAGEMENT: CMD 'hold release'
Mon Jan 25 22:19:17 2016 us=893217 LZO compression initialized
Mon Jan 25 22:19:17 2016 us=894219 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Jan 25 22:19:17 2016 us=894219 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jan 25 22:19:17 2016 us=894219 MANAGEMENT: >STATE:1453756757,RESOLVE,,,
Mon Jan 25 22:19:17 2016 us=954222 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Jan 25 22:19:17 2016 us=954222 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jan 25 22:19:17 2016 us=954222 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jan 25 22:19:17 2016 us=954222 Local Options hash (VER=V4): '41690919'
Mon Jan 25 22:19:17 2016 us=954222 Expected Remote Options hash (VER=V4): '530fdded'
Mon Jan 25 22:19:17 2016 us=954222 UDPv4 link local: [undef]
Mon Jan 25 22:19:17 2016 us=954222 UDPv4 link remote: [AF_INET]104.40.221.18:1194
Mon Jan 25 22:19:17 2016 us=954222 MANAGEMENT: >STATE:1453756757,WAIT,,,
Mon Jan 25 22:20:17 2016 us=109084 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 25 22:20:17 2016 us=109084 TLS Error: TLS handshake failed
Mon Jan 25 22:20:17 2016 us=123092 TCP/UDP: Closing socket
Mon Jan 25 22:20:17 2016 us=126093 SIGUSR1[soft,tls-error] received, process restarting

I tried boith TCP and UDP. On client side I have Windows 8.1, but I tried with Windows 7 on same home network (wifi). I do run openvpn client as admin of course.

I am loosing too much time with this, but wouldn't want to run Ubuntu Server with GUI, and I need it mainly for Oracle APEX development, so I will need SQL Developer connection, and APEX on web browser.

So to go through few options as quick as possible:
1) Ubuntu Server is VM on Azure cloud, so its *.cloudapp.net. Does this play any role? The owner of this machine already opened ports 1194 UDP, TCP, HTTPS, etc, as shown here: http://azure-openvpn.github.io/. But if I test any port on http://www.yougetsignal.com/tools/open-ports/ it will say that port is closed. I disabled ufw for testing always, and firewalls on Windows clients.

2) even https://[server address]:943/admin doesn't work, despite port 943 being supposedly opened on Azure, and firewall down by ufw disable through Putty.

4) the owner of that cloudapp said he can connect with VPN, but I'm still awaiting .log of successful connection to confirm this. If so, is it possible that problem is somewhere in my home network/router? Though I don't see why that would be the case.

5) just to make two things clear: "The hostname/IP and port of the server." refers to, say, remote myexampleapp.cloudapp.net 1194? is this correct? If I use that, the connection process will translate hostname to 104.40.221.18 address, as seen in log above. So I guess such entry is correct. I also tried using remote 10.8.0.1 1194. Should I use something else?

Anyway, its always this same error, and nothing seems to work.

Is there anything you can suggest?

Thanks.

lidagon

Somehow the problem is fixed after I removed tls-auth entry from server.conf, which I mostly had uncommented enyhow before in failed attempts.

The only problem seems to be I'm loosing internet every once in a while when connected to VPN. If this is because of my wifi, how can I make openvpn reconnect automatically?

Traffic

Is the connection dropped once per hour ?

Perhaps it is --reneg-sec (default 3600 = 1 hour)

lidagon

Traffic wroteIs the connection dropped once per hour ?

Perhaps it is --reneg-sec (default 3600 = 1 hour)

It was lesser than that. But last time closer to the router with better wifi it didn't break at all. I'll take the above into account if it limits on 1 hour though.