TLS Key negotiation failed to occur within 60 seconds

Skating_On_Thin_Ice

I'm trying to setup openvpn and either a firewall is getting in my or openvpn isn't running properly.
I'm on CentOs 6.7 and here is my config:
Client:

client
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
</ca>
<cert>
</cert>
<key>
</key>
<

Server:

#################################################
# Sample OpenVPN 2.0 config file for            #
# multi-client server.                          #
#                                               #
# This file is for the server side              #
# of a many-clients <-> one-server              #
# OpenVPN configuration.                        #
#                                               #
# OpenVPN also supports                         #
# single-machine <-> single-machine             #
# configurations (See the Examples page         #
# on the web site for more info).               #
#                                               #
# This config should work on Windows            #
# or Linux/BSD systems.  Remember on            #
# Windows to quote pathnames and use            #
# double backslashes, e.g.:                     #
# "C:\\Program Files\\OpenVPN\\config\\foo.key" #
#                                               #
# Comments are preceded with '#' or ';'         #
#################################################

# Which local IP address should OpenVPN
# listen on? (optional)
;local a.b.c.d

# Which TCP/UDP port should OpenVPN listen on?
# If you want to run multiple OpenVPN instances
# on the same machine, use a different port
# number for each one.  You will need to
# open up this port on your firewall.
port 1194


# TCP or UDP server?
;proto tcp
proto udp

# "dev tun" will create a routed IP tunnel,
# "dev tap" will create an ethernet tunnel.
# Use "dev tap0" if you are ethernet bridging
# and have precreated a tap0 virtual interface
# and bridged it with your ethernet interface.
# If you want to control access policies
# over the VPN, you must create firewall
# rules for the the TUN/TAP interface.
# On non-Windows systems, you can give
# an explicit unit number, such as tun0.
# On Windows, use "dev-node" for this.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel if you
# have more than one.  On XP SP2 or higher,
# you may need to selectively disable the
# Windows firewall for the TAP adapter.
# Non-Windows systems usually don't need this.
;dev-node MyTap

# SSL/TLS root certificate (ca), certificate
# (cert), and private key (key).  Each client
# and the server must have their own cert and
# key file.  The server and all clients will
# use the same ca file.
#
# See the "easy-rsa" directory for a series
# of scripts for generating RSA certificates
# and private keys.  Remember to use
# a unique Common Name for the server
# and each of the client certificates.
#
# Any X509 key management system can be used.
# OpenVPN can also use a PKCS #12 formatted key file
# (see "pkcs12" directive in man page).
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret

# Diffie hellman parameters.
# Generate your own with:
#   openssl dhparam -out dh2048.pem 2048
dh dh2048.pem

# Network topology
# Should be subnet (addressing via IP)
# unless Windows clients v2.0.9 and lower have to
# be supported (then net30, i.e. a /30 per client)
# Defaults to net30 (not recommended)
;topology subnet

# Configure server mode and supply a VPN subnet
# for OpenVPN to draw client addresses from.
# The server will take 10.8.0.1 for itself,
# the rest will be made available to clients.
# Each client will be able to reach the server
# on 10.8.0.1. Comment this line out if you are
# ethernet bridging. See the man page for more info.
server 10.8.0.0 255.255.255.0

# Maintain a record of client <-> virtual IP address
# associations in this file.  If OpenVPN goes down or
# is restarted, reconnecting clients can be assigned
# the same virtual IP address from the pool that was
# previously assigned.
ifconfig-pool-persist ipp.txt

# Configure server mode for ethernet bridging.
# You must first use your OS's bridging capability
# to bridge the TAP interface with the ethernet
# NIC interface.  Then you must manually set the
# IP/netmask on the bridge interface, here we
# assume 10.8.0.4/255.255.255.0.  Finally we
# must set aside an IP range in this subnet
# (start=10.8.0.50 end=10.8.0.100) to allocate
# to connecting clients.  Leave this line commented
# out unless you are ethernet bridging.
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

# Configure server mode for ethernet bridging
# using a DHCP-proxy, where clients talk
# to the OpenVPN server-side DHCP server
# to receive their IP address allocation
# and DNS server addresses.  You must first use
# your OS's bridging capability to bridge the TAP
# interface with the ethernet NIC interface.
# Note: this mode only works on clients (such as
# Windows), where the client-side TAP adapter is
# bound to a DHCP client.
;server-bridge

# Push routes to the client to allow it
# to reach other private subnets behind
# the server.  Remember that these
# private subnets will also need
# to know to route the OpenVPN client
# address pool (10.8.0.0/255.255.255.0)
# back to the OpenVPN server.
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

# To assign specific IP addresses to specific
# clients or if a connecting client has a private
# subnet behind it that should also have VPN access,
# use the subdirectory "ccd" for client-specific
# configuration files (see man page for more info).

# EXAMPLE: Suppose the client
# having the certificate common name "Thelonious"
# also has a small subnet behind his connecting
# machine, such as 192.168.40.128/255.255.255.248.
# First, uncomment out these lines:
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
# Then create a file ccd/Thelonious with this line:
#   iroute 192.168.40.128 255.255.255.248
# This will allow Thelonious' private subnet to
# access the VPN.  This example will only work
# if you are routing, not bridging, i.e. you are
# using "dev tun" and "server" directives.

# EXAMPLE: Suppose you want to give
# Thelonious a fixed VPN IP address of 10.9.0.1.
# First uncomment out these lines:
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
# Then add this line to ccd/Thelonious:
#   ifconfig-push 10.9.0.1 10.9.0.2

# Suppose that you want to enable different
# firewall access policies for different groups
# of clients.  There are two methods:
# (1) Run multiple OpenVPN daemons, one for each
#     group, and firewall the TUN/TAP interface
#     for each group/daemon appropriately.
# (2) (Advanced) Create a script to dynamically
#     modify the firewall in response to access
#     from different clients.  See man
#     page for more info on learn-address script.
;learn-address ./script

# If enabled, this directive will configure
# all clients to redirect their default
# network gateway through the VPN, causing
# all IP traffic such as web browsing and
# and DNS lookups to go through the VPN
# (The OpenVPN server machine may need to NAT
# or bridge the TUN/TAP interface to the internet
# in order for this to work properly).
push "redirect-gateway def1 bypass-dhcp"

# Certain Windows-specific network settings
# can be pushed to clients, such as DNS
# or WINS server addresses.  CAVEAT:
# http://openvpn.net/faq.html#dhcpcaveats
# The addresses below refer to the public
# DNS servers provided by opendns.com.
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

# Uncomment this directive to allow different
# clients to be able to "see" each other.
# By default, clients will only see the server.
# To force clients to only see the server, you
# will also need to appropriately firewall the
# server's TUN/TAP interface.
;client-to-client

# Uncomment this directive if multiple clients
# might connect with the same certificate/key
# files or common names.  This is recommended
# only for testing purposes.  For production use,
# each client should have its own certificate/key
# pair.
#
# IF YOU HAVE NOT GENERATED INDIVIDUAL
# CERTIFICATE/KEY PAIRS FOR EACH CLIENT,
# EACH HAVING ITS OWN UNIQUE "COMMON NAME",
# UNCOMMENT THIS LINE OUT.
;duplicate-cn

# The keepalive directive causes ping-like
# messages to be sent back and forth over
# the link so that each side knows when
# the other side has gone down.
# Ping every 10 seconds, assume that remote
# peer is down if no ping received during
# a 120 second time period.
keepalive 10 120

# For extra security beyond that provided
# by SSL/TLS, create an "HMAC firewall"
# to help block DoS attacks and UDP port flooding.
#
# Generate with:
#   openvpn --genkey --secret ta.key
#
# The server and each client must have
# a copy of this key.
# The second parameter should be '0'
# on the server and '1' on the clients.
;tls-auth ta.key 0 # This file is secret

# Select a cryptographic cipher.
# This config item must be copied to
# the client config file as well.
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES

# Enable compression on the VPN link.
# If you enable it here, you must also
# enable it in the client config file.
comp-lzo

# The maximum number of concurrently connected
# clients we want to allow.
;max-clients 100

# It's a good idea to reduce the OpenVPN
# daemon's privileges after initialization.
#
# You can uncomment this out on
# non-Windows systems.
user nobodygroup nobody

# The persist options will try to avoid
# accessing certain resources on restart
# that may no longer be accessible because
# of the privilege downgrade.
persist-key
persist-tun

# Output a short status file showing
# current connections, truncated
# and rewritten every minute.
status openvpn-status.log

# By default, log messages will go to the syslog (or
# on Windows, if running as a service, they will go to
# the "\Program Files\OpenVPN\log" directory).
# Use log or log-append to override this default.
# "log" will truncate the log file on OpenVPN startup,
# while "log-append" will append to it.  Use one
# or the other (but not both).
;log         openvpn.log
;log-append  openvpn.log

# Set the appropriate level of log
# file verbosity.
#
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 3

# Silence repeating messages.  At most 20
# sequential messages of the same message
# category will be output to the log.
;mute 20

I know it's not a local firewall because I''ve tried it on my android connected to 4g and to my wifi. When I look at my ifconfig I never see a tun interface. If I understand this correctly, one should be there when openvpn is running properly. If it was a firewall problem it would have to be server side.
Ip tables:

# Generated by iptables-save v1.4.7 on Sun Mar 13 01:16:01 2016
*filter
:INPUT ACCEPT [12299:664460]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [11950:1063110]
COMMIT
# Completed on Sun Mar 13 01:16:01 2016
# Generated by iptables-save v1.4.7 on Sun Mar 13 01:16:01 2016
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE 
COMMIT
# Completed on Sun Mar 13 01:16:01 2016

I've setup openvpn before without any problems following the same instructions I am using now. I don't know what is wrong. I'm very lost and confused.

Traffic

Did you port forward on your router ?

Skating_On_Thin_Ice

Traffic wroteDid you port forward on your router ?

Are you talking about my home router? I tried connecting to the vpn through my wifi and through 4g data and it didn't work either time. The vpn is hosted on a vps is toronto. I'll check with them to see if they have any restrictions in place but I think that is unlikely. When openvpn is running and you run ifconfig I believe it's supposed so show a tun interface, I am not getting one.

Traffic

Set --verb 4 in your configs and post your logs (remove private data)

Skating_On_Thin_Ice

Mon Mar 14 16:56:05 2016 us=587881 Current Parameter Settings:
Mon Mar 14 16:56:05 2016 us=587949   config = 'client.ovpn'
Mon Mar 14 16:56:05 2016 us=587964   mode = 0
Mon Mar 14 16:56:05 2016 us=587976   persist_config = DISABLED
Mon Mar 14 16:56:05 2016 us=587988   persist_mode = 1
Mon Mar 14 16:56:05 2016 us=588000   show_ciphers = DISABLED
Mon Mar 14 16:56:05 2016 us=588011   show_digests = DISABLED
Mon Mar 14 16:56:05 2016 us=588023   show_engines = DISABLED
Mon Mar 14 16:56:05 2016 us=588034   genkey = DISABLED
Mon Mar 14 16:56:05 2016 us=588045   key_pass_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588055   show_tls_ciphers = DISABLED
Mon Mar 14 16:56:05 2016 us=588066 Connection profiles [default]:
Mon Mar 14 16:56:05 2016 us=588078   proto = udp
Mon Mar 14 16:56:05 2016 us=588090   local = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588109   local_port = 0
Mon Mar 14 16:56:05 2016 us=588120   remote = 'x.x.x.x'
Mon Mar 14 16:56:05 2016 us=588131   remote_port = 1194
Mon Mar 14 16:56:05 2016 us=588142   remote_float = DISABLED
Mon Mar 14 16:56:05 2016 us=588152   bind_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=588163   bind_local = DISABLED
Mon Mar 14 16:56:05 2016 us=588174   connect_retry_seconds = 5
Mon Mar 14 16:56:05 2016 us=588185   connect_timeout = 10
Mon Mar 14 16:56:05 2016 us=588195   connect_retry_max = 0
Mon Mar 14 16:56:05 2016 us=588206   socks_proxy_server = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588217   socks_proxy_port = 0
Mon Mar 14 16:56:05 2016 us=588228   socks_proxy_retry = DISABLED
Mon Mar 14 16:56:05 2016 us=588239   tun_mtu = 1500
Mon Mar 14 16:56:05 2016 us=588249   tun_mtu_defined = ENABLED
Mon Mar 14 16:56:05 2016 us=588261   link_mtu = 1500
Mon Mar 14 16:56:05 2016 us=588272   link_mtu_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=588282   tun_mtu_extra = 0
Mon Mar 14 16:56:05 2016 us=588293   tun_mtu_extra_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=588304   mtu_discover_type = -1
Mon Mar 14 16:56:05 2016 us=588315   fragment = 0
Mon Mar 14 16:56:05 2016 us=588332   mssfix = 1450
Mon Mar 14 16:56:05 2016 us=588343   explicit_exit_notification = 0
Mon Mar 14 16:56:05 2016 us=588355 Connection profiles END
Mon Mar 14 16:56:05 2016 us=588370   remote_random = DISABLED
Mon Mar 14 16:56:05 2016 us=588381   ipchange = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588395   dev = 'tun'
Mon Mar 14 16:56:05 2016 us=588406   dev_type = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588417   dev_node = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588427   lladdr = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588438   topology = 1
Mon Mar 14 16:56:05 2016 us=588449   tun_ipv6 = DISABLED
Mon Mar 14 16:56:05 2016 us=588459   ifconfig_local = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588470   ifconfig_remote_netmask = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588486   ifconfig_noexec = DISABLED
Mon Mar 14 16:56:05 2016 us=588496   ifconfig_nowarn = DISABLED
Mon Mar 14 16:56:05 2016 us=588507   ifconfig_ipv6_local = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588519   ifconfig_ipv6_netbits = 0
Mon Mar 14 16:56:05 2016 us=588530   ifconfig_ipv6_remote = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588545   shaper = 0
Mon Mar 14 16:56:05 2016 us=588556   mtu_test = 0
Mon Mar 14 16:56:05 2016 us=588567   mlock = DISABLED
Mon Mar 14 16:56:05 2016 us=588578   keepalive_ping = 0
Mon Mar 14 16:56:05 2016 us=588589   keepalive_timeout = 0
Mon Mar 14 16:56:05 2016 us=588599   inactivity_timeout = 0
Mon Mar 14 16:56:05 2016 us=588611   ping_send_timeout = 0
Mon Mar 14 16:56:05 2016 us=588622   ping_rec_timeout = 0
Mon Mar 14 16:56:05 2016 us=588635   ping_rec_timeout_action = 0
Mon Mar 14 16:56:05 2016 us=588646   ping_timer_remote = DISABLED
Mon Mar 14 16:56:05 2016 us=588659   remap_sigusr1 = 0
Mon Mar 14 16:56:05 2016 us=588670   persist_tun = ENABLED
Mon Mar 14 16:56:05 2016 us=588680   persist_local_ip = DISABLED
Mon Mar 14 16:56:05 2016 us=588690   persist_remote_ip = DISABLED
Mon Mar 14 16:56:05 2016 us=588700   persist_key = ENABLED
Mon Mar 14 16:56:05 2016 us=588711   passtos = DISABLED
Mon Mar 14 16:56:05 2016 us=588721   resolve_retry_seconds = 1000000000
Mon Mar 14 16:56:05 2016 us=588731   username = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588742   groupname = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588752   chroot_dir = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588762   cd_dir = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588772   writepid = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588782   up_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588793   down_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588803   down_pre = DISABLED
Mon Mar 14 16:56:05 2016 us=588814   up_restart = DISABLED
Mon Mar 14 16:56:05 2016 us=588824   up_delay = DISABLED
Mon Mar 14 16:56:05 2016 us=588834   daemon = DISABLED
Mon Mar 14 16:56:05 2016 us=588844   inetd = 0
Mon Mar 14 16:56:05 2016 us=588854   log = DISABLED
Mon Mar 14 16:56:05 2016 us=588865   suppress_timestamps = DISABLED
Mon Mar 14 16:56:05 2016 us=588875   nice = 0
Mon Mar 14 16:56:05 2016 us=588885   verbosity = 4
Mon Mar 14 16:56:05 2016 us=588895   mute = 0
Mon Mar 14 16:56:05 2016 us=588905   gremlin = 0
Mon Mar 14 16:56:05 2016 us=588916   status_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=588926   status_file_version = 1
Mon Mar 14 16:56:05 2016 us=588936   status_file_update_freq = 60
Mon Mar 14 16:56:05 2016 us=588946   occ = ENABLED
Mon Mar 14 16:56:05 2016 us=588956   rcvbuf = 65536
Mon Mar 14 16:56:05 2016 us=588966   sndbuf = 65536
Mon Mar 14 16:56:05 2016 us=588976   mark = 0
Mon Mar 14 16:56:05 2016 us=588987   sockflags = 0
Mon Mar 14 16:56:05 2016 us=588997   fast_io = DISABLED
Mon Mar 14 16:56:05 2016 us=589007   lzo = 7
Mon Mar 14 16:56:05 2016 us=589017   route_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589027   route_default_gateway = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589037   route_default_metric = 0
Mon Mar 14 16:56:05 2016 us=589048   route_noexec = DISABLED
Mon Mar 14 16:56:05 2016 us=589058   route_delay = 0
Mon Mar 14 16:56:05 2016 us=589069   route_delay_window = 30
Mon Mar 14 16:56:05 2016 us=589079   route_delay_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=589089   route_nopull = DISABLED
Mon Mar 14 16:56:05 2016 us=589100   route_gateway_via_dhcp = DISABLED
Mon Mar 14 16:56:05 2016 us=589110   max_routes = 100
Mon Mar 14 16:56:05 2016 us=589120   allow_pull_fqdn = DISABLED
Mon Mar 14 16:56:05 2016 us=589130   management_addr = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589141   management_port = 0
Mon Mar 14 16:56:05 2016 us=589151   management_user_pass = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589162   management_log_history_cache = 250
Mon Mar 14 16:56:05 2016 us=589172   management_echo_buffer_size = 100
Mon Mar 14 16:56:05 2016 us=589183   management_write_peer_info_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589194   management_client_user = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589204   management_client_group = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589215   management_flags = 0
Mon Mar 14 16:56:05 2016 us=589225   shared_secret_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589235   key_direction = 0
Mon Mar 14 16:56:05 2016 us=589246   ciphername_defined = ENABLED
Mon Mar 14 16:56:05 2016 us=589256   ciphername = 'BF-CBC'
Mon Mar 14 16:56:05 2016 us=589267   authname_defined = ENABLED
Mon Mar 14 16:56:05 2016 us=589277   authname = 'SHA1'
Mon Mar 14 16:56:05 2016 us=589287   prng_hash = 'SHA1'
Mon Mar 14 16:56:05 2016 us=589297   prng_nonce_secret_len = 16
Mon Mar 14 16:56:05 2016 us=589308   keysize = 0
Mon Mar 14 16:56:05 2016 us=589318   engine = DISABLED
Mon Mar 14 16:56:05 2016 us=589328   replay = ENABLED
Mon Mar 14 16:56:05 2016 us=589339   mute_replay_warnings = DISABLED
Mon Mar 14 16:56:05 2016 us=589349   replay_window = 64
Mon Mar 14 16:56:05 2016 us=589360   replay_time = 15
Mon Mar 14 16:56:05 2016 us=589370   packet_id_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589380   use_iv = ENABLED
Mon Mar 14 16:56:05 2016 us=589390   test_crypto = DISABLED
Mon Mar 14 16:56:05 2016 us=589400   tls_server = DISABLED
Mon Mar 14 16:56:05 2016 us=589410   tls_client = ENABLED
Mon Mar 14 16:56:05 2016 us=589421   key_method = 2
Mon Mar 14 16:56:05 2016 us=589431   ca_file = '[[INLINE]]'
Mon Mar 14 16:56:05 2016 us=589441   ca_path = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589451   dh_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589461   cert_file = '[[INLINE]]'
Mon Mar 14 16:56:05 2016 us=589471   priv_key_file = '[[INLINE]]'
Mon Mar 14 16:56:05 2016 us=589481   pkcs12_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589492   cipher_list = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589502   tls_verify = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589512   tls_export_cert = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589523   verify_x509_type = 0
Mon Mar 14 16:56:05 2016 us=589533   verify_x509_name = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589543   crl_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589553   ns_cert_type = 0
Mon Mar 14 16:56:05 2016 us=589563   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589573   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589583   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589593   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589603   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589613   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589623   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589633   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589643   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589653   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589663   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589673   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589682   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589692   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589702   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589712   remote_cert_ku[i] = 0
Mon Mar 14 16:56:05 2016 us=589722   remote_cert_eku = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589733   ssl_flags = 0
Mon Mar 14 16:56:05 2016 us=589743   tls_timeout = 2
Mon Mar 14 16:56:05 2016 us=589753   renegotiate_bytes = 0
Mon Mar 14 16:56:05 2016 us=589763   renegotiate_packets = 0
Mon Mar 14 16:56:05 2016 us=589773   renegotiate_seconds = 3600
Mon Mar 14 16:56:05 2016 us=589783   handshake_window = 60
Mon Mar 14 16:56:05 2016 us=589793   transition_window = 3600
Mon Mar 14 16:56:05 2016 us=589803   single_session = DISABLED
Mon Mar 14 16:56:05 2016 us=589814   push_peer_info = DISABLED
Mon Mar 14 16:56:05 2016 us=589824   tls_exit = DISABLED
Mon Mar 14 16:56:05 2016 us=589834   tls_auth_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=589844   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589855   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589865   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589875   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589885   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589896   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589906   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589916   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589926   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589936   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589947   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589957   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589967   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589977   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589987   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=589997   pkcs11_protected_authentication = DISABLED
Mon Mar 14 16:56:05 2016 us=590009   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590019   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590029   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590039   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590050   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590060   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590070   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590080   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590090   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590100   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590110   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590120   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590130   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590140   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590151   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590161   pkcs11_private_mode = 00000000
Mon Mar 14 16:56:05 2016 us=590171   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590181   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590191   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590201   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590211   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590221   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590231   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590241   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590251   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590261   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590271   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590281   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590291   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590302   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590311   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590321   pkcs11_cert_private = DISABLED
Mon Mar 14 16:56:05 2016 us=590332   pkcs11_pin_cache_period = -1
Mon Mar 14 16:56:05 2016 us=590342   pkcs11_id = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590352   pkcs11_id_management = DISABLED
Mon Mar 14 16:56:05 2016 us=590368   server_network = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590379   server_netmask = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590398   server_network_ipv6 = ::
Mon Mar 14 16:56:05 2016 us=590409   server_netbits_ipv6 = 0
Mon Mar 14 16:56:05 2016 us=590420   server_bridge_ip = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590431   server_bridge_netmask = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590442   server_bridge_pool_start = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590454   server_bridge_pool_end = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590465   ifconfig_pool_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=590476   ifconfig_pool_start = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590487   ifconfig_pool_end = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590498   ifconfig_pool_netmask = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590509   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590519   ifconfig_pool_persist_refresh_freq = 600
Mon Mar 14 16:56:05 2016 us=590530   ifconfig_ipv6_pool_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=590541   ifconfig_ipv6_pool_base = ::
Mon Mar 14 16:56:05 2016 us=590551   ifconfig_ipv6_pool_netbits = 0
Mon Mar 14 16:56:05 2016 us=590561   n_bcast_buf = 256
Mon Mar 14 16:56:05 2016 us=590571   tcp_queue_limit = 64
Mon Mar 14 16:56:05 2016 us=590582   real_hash_size = 256
Mon Mar 14 16:56:05 2016 us=590592   virtual_hash_size = 256
Mon Mar 14 16:56:05 2016 us=590603   client_connect_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590613   learn_address_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590623   client_disconnect_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590634   client_config_dir = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590644   ccd_exclusive = DISABLED
Mon Mar 14 16:56:05 2016 us=590654   tmp_dir = '/tmp'
Mon Mar 14 16:56:05 2016 us=590664   push_ifconfig_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=590676   push_ifconfig_local = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590690   push_ifconfig_remote_netmask = 0.0.0.0
Mon Mar 14 16:56:05 2016 us=590701   push_ifconfig_ipv6_defined = DISABLED
Mon Mar 14 16:56:05 2016 us=590712   push_ifconfig_ipv6_local = ::/0
Mon Mar 14 16:56:05 2016 us=590723   push_ifconfig_ipv6_remote = ::
Mon Mar 14 16:56:05 2016 us=590733   enable_c2c = DISABLED
Mon Mar 14 16:56:05 2016 us=590743   duplicate_cn = DISABLED
Mon Mar 14 16:56:05 2016 us=590753   cf_max = 0
Mon Mar 14 16:56:05 2016 us=590763   cf_per = 0
Mon Mar 14 16:56:05 2016 us=590773   max_clients = 1024
Mon Mar 14 16:56:05 2016 us=590784   max_routes_per_client = 256
Mon Mar 14 16:56:05 2016 us=590794   auth_user_pass_verify_script = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590805   auth_user_pass_verify_script_via_file = DISABLED
Mon Mar 14 16:56:05 2016 us=590816   port_share_host = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590826   port_share_port = 0
Mon Mar 14 16:56:05 2016 us=590836   client = ENABLED
Mon Mar 14 16:56:05 2016 us=590846   pull = ENABLED
Mon Mar 14 16:56:05 2016 us=590856   auth_user_pass_file = '[UNDEF]'
Mon Mar 14 16:56:05 2016 us=590868 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  1 2014
Mon Mar 14 16:56:05 2016 us=590887 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Mon Mar 14 16:56:05 2016 us=591024 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Mar 14 16:56:05 2016 us=591724 LZO compression initialized
Mon Mar 14 16:56:05 2016 us=591809 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 14 16:56:05 2016 us=591852 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Mar 14 16:56:05 2016 us=591873 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 14 16:56:05 2016 us=591897 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Mar 14 16:56:05 2016 us=591909 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Mar 14 16:56:05 2016 us=591934 Local Options hash (VER=V4): '41690919'
Mon Mar 14 16:56:05 2016 us=591952 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 14 16:56:05 2016 us=591966 UDPv4 link local: [undef]
Mon Mar 14 16:56:05 2016 us=591980 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Mon Mar 14 16:57:06 2016 us=205847 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 14 16:57:06 2016 us=205903 TLS Error: TLS handshake failed
Mon Mar 14 16:57:06 2016 us=206084 TCP/UDP: Closing socket
Mon Mar 14 16:57:06 2016 us=206131 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 14 16:57:06 2016 us=206148 Restart pause, 2 second(s)
Mon Mar 14 16:57:08 2016 us=206321 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Mar 14 16:57:08 2016 us=206401 Re-using SSL/TLS context
Mon Mar 14 16:57:08 2016 us=206456 LZO compression initialized
Mon Mar 14 16:57:08 2016 us=206563 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 14 16:57:08 2016 us=206624 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Mar 14 16:57:08 2016 us=206660 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 14 16:57:08 2016 us=206701 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Mar 14 16:57:08 2016 us=206717 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Mar 14 16:57:08 2016 us=206752 Local Options hash (VER=V4): '41690919'
Mon Mar 14 16:57:08 2016 us=206779 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 14 16:57:08 2016 us=206799 UDPv4 link local: [undef]
Mon Mar 14 16:57:08 2016 us=206819 UDPv4 link remote: [AF_INET]x.x.x.x:1194
Mon Mar 14 16:58:08 2016 us=24154 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 14 16:58:08 2016 us=24216 TLS Error: TLS handshake failed
Mon Mar 14 16:58:08 2016 us=24359 TCP/UDP: Closing socket
Mon Mar 14 16:58:08 2016 us=24411 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 14 16:58:08 2016 us=24435 Restart pause, 2 second(s)
Mon Mar 14 16:58:10 2016 us=24611 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mon Mar 14 16:58:10 2016 us=24684 Re-using SSL/TLS context
Mon Mar 14 16:58:10 2016 us=24711 LZO compression initialized
Mon Mar 14 16:58:10 2016 us=24805 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Mar 14 16:58:10 2016 us=24861 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Mar 14 16:58:10 2016 us=24891 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Mar 14 16:58:10 2016 us=24929 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Mar 14 16:58:10 2016 us=24943 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Mar 14 16:58:10 2016 us=24974 Local Options hash (VER=V4): '41690919'
Mon Mar 14 16:58:10 2016 us=24998 Expected Remote Options hash (VER=V4): '530fdded'
Mon Mar 14 16:58:10 2016 us=25017 UDPv4 link local: [undef]
Mon Mar 14 16:58:10 2016 us=25036 UDPv4 link remote: [AF_INET]x.x.x.x:1194
^CMon Mar 14 16:58:19 2016 us=199455 event_wait : Interrupted system call (code=4)
Mon Mar 14 16:58:19 2016 us=199725 TCP/UDP: Closing socket
Mon Mar 14 16:58:19 2016 us=199789 SIGINT[hard,] received, process exiting

Traffic

And your server log ?

Skating_On_Thin_Ice

Traffic wroteAnd your server log ?

Nothing is in the server log.

I checked with the vps provider and they said they have no firewalls in place to stop openvpn connections so I don't even know... It has to be a firewall somewhere.. I'm assuming on the actual box itself (Running CentOS 6.7)

Traffic

Skating_On_Thin_Ice wroteNothing is in the server log

Skating_On_Thin_Ice wroteServer:

;log         openvpn.log
;log-append  openvpn.log

Enable logging ..

Skating_On_Thin_Ice

Mon Mar 14 21:09:03 2016 us=126858 Current Parameter Settings:
Mon Mar 14 21:09:03 2016 us=127017   config = 'server.conf'
Mon Mar 14 21:09:03 2016 us=127036   mode = 1
Mon Mar 14 21:09:03 2016 us=127048   persist_config = DISABLED
Mon Mar 14 21:09:03 2016 us=127059   persist_mode = 1
Mon Mar 14 21:09:03 2016 us=127070   show_ciphers = DISABLED
Mon Mar 14 21:09:03 2016 us=127082   show_digests = DISABLED
Mon Mar 14 21:09:03 2016 us=127093   show_engines = DISABLED
Mon Mar 14 21:09:03 2016 us=127104   genkey = DISABLED
Mon Mar 14 21:09:03 2016 us=127115   key_pass_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127122   show_tls_ciphers = DISABLED
Mon Mar 14 21:09:03 2016 us=127138 Connection profiles [default]:
Mon Mar 14 21:09:03 2016 us=127147   proto = udp
Mon Mar 14 21:09:03 2016 us=127154   local = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127161   local_port = 1194
Mon Mar 14 21:09:03 2016 us=127168   remote = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127175   remote_port = 1194
Mon Mar 14 21:09:03 2016 us=127182   remote_float = DISABLED
Mon Mar 14 21:09:03 2016 us=127188   bind_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=127195   bind_local = ENABLED
Mon Mar 14 21:09:03 2016 us=127202   connect_retry_seconds = 5
Mon Mar 14 21:09:03 2016 us=127209   connect_timeout = 10
Mon Mar 14 21:09:03 2016 us=127216   connect_retry_max = 0
Mon Mar 14 21:09:03 2016 us=127223   socks_proxy_server = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127230   socks_proxy_port = 0
Mon Mar 14 21:09:03 2016 us=127237   socks_proxy_retry = DISABLED
Mon Mar 14 21:09:03 2016 us=127244   tun_mtu = 1500
Mon Mar 14 21:09:03 2016 us=127251   tun_mtu_defined = ENABLED
Mon Mar 14 21:09:03 2016 us=127258   link_mtu = 1500
Mon Mar 14 21:09:03 2016 us=127265   link_mtu_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=127271   tun_mtu_extra = 0
Mon Mar 14 21:09:03 2016 us=127278   tun_mtu_extra_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=127285   mtu_discover_type = -1
Mon Mar 14 21:09:03 2016 us=127292   fragment = 0
Mon Mar 14 21:09:03 2016 us=127299   mssfix = 1450
Mon Mar 14 21:09:03 2016 us=127306   explicit_exit_notification = 0
Mon Mar 14 21:09:03 2016 us=127318 Connection profiles END
Mon Mar 14 21:09:03 2016 us=127326   remote_random = DISABLED
Mon Mar 14 21:09:03 2016 us=127333   ipchange = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127340   dev = 'tun'
Mon Mar 14 21:09:03 2016 us=127366   dev_type = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127375   dev_node = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127382   lladdr = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127389   topology = 1
Mon Mar 14 21:09:03 2016 us=127396   tun_ipv6 = DISABLED
Mon Mar 14 21:09:03 2016 us=127403   ifconfig_local = '10.8.0.1'
Mon Mar 14 21:09:03 2016 us=127410   ifconfig_remote_netmask = '10.8.0.2'
Mon Mar 14 21:09:03 2016 us=127417   ifconfig_noexec = DISABLED
Mon Mar 14 21:09:03 2016 us=127424   ifconfig_nowarn = DISABLED
Mon Mar 14 21:09:03 2016 us=127430   ifconfig_ipv6_local = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127437   ifconfig_ipv6_netbits = 0
Mon Mar 14 21:09:03 2016 us=127444   ifconfig_ipv6_remote = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127453   shaper = 0
Mon Mar 14 21:09:03 2016 us=127462   mtu_test = 0
Mon Mar 14 21:09:03 2016 us=127469   mlock = DISABLED
Mon Mar 14 21:09:03 2016 us=127476   keepalive_ping = 10
Mon Mar 14 21:09:03 2016 us=127483   keepalive_timeout = 120
Mon Mar 14 21:09:03 2016 us=127489   inactivity_timeout = 0
Mon Mar 14 21:09:03 2016 us=127496   ping_send_timeout = 10
Mon Mar 14 21:09:03 2016 us=127503   ping_rec_timeout = 240
Mon Mar 14 21:09:03 2016 us=127510   ping_rec_timeout_action = 2
Mon Mar 14 21:09:03 2016 us=127517   ping_timer_remote = DISABLED
Mon Mar 14 21:09:03 2016 us=127524   remap_sigusr1 = 0
Mon Mar 14 21:09:03 2016 us=127530   persist_tun = ENABLED
Mon Mar 14 21:09:03 2016 us=127537   persist_local_ip = DISABLED
Mon Mar 14 21:09:03 2016 us=127544   persist_remote_ip = DISABLED
Mon Mar 14 21:09:03 2016 us=127551   persist_key = ENABLED
Mon Mar 14 21:09:03 2016 us=127558   passtos = DISABLED
Mon Mar 14 21:09:03 2016 us=127565   resolve_retry_seconds = 1000000000
Mon Mar 14 21:09:03 2016 us=127598   username = 'nobodygroup'
Mon Mar 14 21:09:03 2016 us=127607   groupname = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127614   chroot_dir = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127621   cd_dir = '/etc/openvpn'
Mon Mar 14 21:09:03 2016 us=127628   writepid = '/var/run/openvpn/server.pid'
Mon Mar 14 21:09:03 2016 us=127635   up_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127642   down_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127648   down_pre = DISABLED
Mon Mar 14 21:09:03 2016 us=127655   up_restart = DISABLED
Mon Mar 14 21:09:03 2016 us=127662   up_delay = DISABLED
Mon Mar 14 21:09:03 2016 us=127669   daemon = ENABLED
Mon Mar 14 21:09:03 2016 us=127675   inetd = 0
Mon Mar 14 21:09:03 2016 us=127682   log = ENABLED
Mon Mar 14 21:09:03 2016 us=127689   suppress_timestamps = DISABLED
Mon Mar 14 21:09:03 2016 us=127696   nice = 0
Mon Mar 14 21:09:03 2016 us=127703   verbosity = 4
Mon Mar 14 21:09:03 2016 us=127710   mute = 0
Mon Mar 14 21:09:03 2016 us=127717   gremlin = 0
Mon Mar 14 21:09:03 2016 us=127723   status_file = 'openvpn-status.log'
Mon Mar 14 21:09:03 2016 us=127730   status_file_version = 1
Mon Mar 14 21:09:03 2016 us=127737   status_file_update_freq = 60
Mon Mar 14 21:09:03 2016 us=127747   occ = ENABLED
Mon Mar 14 21:09:03 2016 us=127760   rcvbuf = 0
Mon Mar 14 21:09:03 2016 us=127772   sndbuf = 0
Mon Mar 14 21:09:03 2016 us=127784   mark = 0
Mon Mar 14 21:09:03 2016 us=127796   sockflags = 0
Mon Mar 14 21:09:03 2016 us=127831   fast_io = DISABLED
Mon Mar 14 21:09:03 2016 us=127844   lzo = 7
Mon Mar 14 21:09:03 2016 us=127851   route_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127858   route_default_gateway = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127865   route_default_metric = 0
Mon Mar 14 21:09:03 2016 us=127873   route_noexec = DISABLED
Mon Mar 14 21:09:03 2016 us=127880   route_delay = 0
Mon Mar 14 21:09:03 2016 us=127887   route_delay_window = 30
Mon Mar 14 21:09:03 2016 us=127894   route_delay_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=127901   route_nopull = DISABLED
Mon Mar 14 21:09:03 2016 us=127908   route_gateway_via_dhcp = DISABLED
Mon Mar 14 21:09:03 2016 us=127915   max_routes = 100
Mon Mar 14 21:09:03 2016 us=127922   allow_pull_fqdn = DISABLED
Mon Mar 14 21:09:03 2016 us=127930   route 10.8.0.0/255.255.255.0/nil/nil
Mon Mar 14 21:09:03 2016 us=127937   management_addr = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127944   management_port = 0
Mon Mar 14 21:09:03 2016 us=127951   management_user_pass = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127959   management_log_history_cache = 250
Mon Mar 14 21:09:03 2016 us=127966   management_echo_buffer_size = 100
Mon Mar 14 21:09:03 2016 us=127973   management_write_peer_info_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127980   management_client_user = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127987   management_client_group = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=127994   management_flags = 0
Mon Mar 14 21:09:03 2016 us=128002   shared_secret_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128009   key_direction = 0
Mon Mar 14 21:09:03 2016 us=128016   ciphername_defined = ENABLED
Mon Mar 14 21:09:03 2016 us=128023   ciphername = 'BF-CBC'
Mon Mar 14 21:09:03 2016 us=128030   authname_defined = ENABLED
Mon Mar 14 21:09:03 2016 us=128037   authname = 'SHA1'
Mon Mar 14 21:09:03 2016 us=128044   prng_hash = 'SHA1'
Mon Mar 14 21:09:03 2016 us=128051   prng_nonce_secret_len = 16
Mon Mar 14 21:09:03 2016 us=128058   keysize = 0
Mon Mar 14 21:09:03 2016 us=128066   engine = DISABLED
Mon Mar 14 21:09:03 2016 us=128073   replay = ENABLED
Mon Mar 14 21:09:03 2016 us=128080   mute_replay_warnings = DISABLED
Mon Mar 14 21:09:03 2016 us=128087   replay_window = 64
Mon Mar 14 21:09:03 2016 us=128094   replay_time = 15
Mon Mar 14 21:09:03 2016 us=128101   packet_id_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128108   use_iv = ENABLED
Mon Mar 14 21:09:03 2016 us=128115   test_crypto = DISABLED
Mon Mar 14 21:09:03 2016 us=128122   tls_server = ENABLED
Mon Mar 14 21:09:03 2016 us=128129   tls_client = DISABLED
Mon Mar 14 21:09:03 2016 us=128136   key_method = 2
Mon Mar 14 21:09:03 2016 us=128162   ca_file = 'ca.crt'
Mon Mar 14 21:09:03 2016 us=128170   ca_path = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128178   dh_file = 'dh2048.pem'
Mon Mar 14 21:09:03 2016 us=128184   cert_file = 'server.crt'
Mon Mar 14 21:09:03 2016 us=128192   extra_certs_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128199   priv_key_file = 'server.key'
Mon Mar 14 21:09:03 2016 us=128206   pkcs12_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128213   cipher_list = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128220   tls_verify = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128227   tls_export_cert = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128234   verify_x509_type = 0
Mon Mar 14 21:09:03 2016 us=128241   verify_x509_name = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128248   crl_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128255   ns_cert_type = 0
Mon Mar 14 21:09:03 2016 us=128262   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128268   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128275   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128282   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128289   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128295   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128302   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128309   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128316   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128322   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128329   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128336   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128342   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128370   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128378   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128384   remote_cert_ku[i] = 0
Mon Mar 14 21:09:03 2016 us=128392   remote_cert_eku = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128398   ssl_flags = 0
Mon Mar 14 21:09:03 2016 us=128405   tls_timeout = 2
Mon Mar 14 21:09:03 2016 us=128412   renegotiate_bytes = 0
Mon Mar 14 21:09:03 2016 us=128419   renegotiate_packets = 0
Mon Mar 14 21:09:03 2016 us=128426   renegotiate_seconds = 3600
Mon Mar 14 21:09:03 2016 us=128433   handshake_window = 60
Mon Mar 14 21:09:03 2016 us=128440   transition_window = 3600
Mon Mar 14 21:09:03 2016 us=128447   single_session = DISABLED
Mon Mar 14 21:09:03 2016 us=128454   push_peer_info = DISABLED
Mon Mar 14 21:09:03 2016 us=128461   tls_exit = DISABLED
Mon Mar 14 21:09:03 2016 us=128468   tls_auth_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128475   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128482   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128489   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128496   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128503   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128510   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128517   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128524   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128530   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128538   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128544   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128551   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128558   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128565   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128572   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128578   pkcs11_protected_authentication = DISABLED
Mon Mar 14 21:09:03 2016 us=128586   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128593   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128600   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128607   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128644   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128654   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128661   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128667   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128674   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128681   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128688   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128695   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128701   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128708   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128715   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128722   pkcs11_private_mode = 00000000
Mon Mar 14 21:09:03 2016 us=128729   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128736   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128743   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128749   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128756   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128763   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128770   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128776   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128783   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128790   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128797   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128803   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128810   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128817   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128824   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128832   pkcs11_cert_private = DISABLED
Mon Mar 14 21:09:03 2016 us=128844   pkcs11_pin_cache_period = -1
Mon Mar 14 21:09:03 2016 us=128856   pkcs11_id = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=128868   pkcs11_id_management = DISABLED
Mon Mar 14 21:09:03 2016 us=128881   server_network = 10.8.0.0
Mon Mar 14 21:09:03 2016 us=128896   server_netmask = 255.255.255.0
Mon Mar 14 21:09:03 2016 us=128929   server_network_ipv6 = ::
Mon Mar 14 21:09:03 2016 us=131304   server_netbits_ipv6 = 0
Mon Mar 14 21:09:03 2016 us=131329   server_bridge_ip = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=131372   server_bridge_netmask = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=131551   server_bridge_pool_start = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=131572   server_bridge_pool_end = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=131587   push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Mar 14 21:09:03 2016 us=131602   push_entry = 'dhcp-option DNS 8.8.8.8'
Mon Mar 14 21:09:03 2016 us=131616   push_entry = 'dhcp-option DNS 8.8.4.4'
Mon Mar 14 21:09:03 2016 us=131630   push_entry = 'route 10.8.0.1'
Mon Mar 14 21:09:03 2016 us=131643   push_entry = 'topology net30'
Mon Mar 14 21:09:03 2016 us=131656   push_entry = 'ping 10'
Mon Mar 14 21:09:03 2016 us=131670   push_entry = 'ping-restart 120'
Mon Mar 14 21:09:03 2016 us=131684   ifconfig_pool_defined = ENABLED
Mon Mar 14 21:09:03 2016 us=131699   ifconfig_pool_start = 10.8.0.4
Mon Mar 14 21:09:03 2016 us=131714   ifconfig_pool_end = 10.8.0.251
Mon Mar 14 21:09:03 2016 us=131728   ifconfig_pool_netmask = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=131742   ifconfig_pool_persist_filename = 'ipp.txt'
Mon Mar 14 21:09:03 2016 us=131756   ifconfig_pool_persist_refresh_freq = 600
Mon Mar 14 21:09:03 2016 us=131770   ifconfig_ipv6_pool_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=131786   ifconfig_ipv6_pool_base = ::
Mon Mar 14 21:09:03 2016 us=131801   ifconfig_ipv6_pool_netbits = 0
Mon Mar 14 21:09:03 2016 us=131815   n_bcast_buf = 256
Mon Mar 14 21:09:03 2016 us=131828   tcp_queue_limit = 64
Mon Mar 14 21:09:03 2016 us=131842   real_hash_size = 256
Mon Mar 14 21:09:03 2016 us=131856   virtual_hash_size = 256
Mon Mar 14 21:09:03 2016 us=131870   client_connect_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=131883   learn_address_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=131927   client_disconnect_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=131944   client_config_dir = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=131958   ccd_exclusive = DISABLED
Mon Mar 14 21:09:03 2016 us=131971   tmp_dir = '/tmp'
Mon Mar 14 21:09:03 2016 us=131985   push_ifconfig_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=132000   push_ifconfig_local = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=132016   push_ifconfig_remote_netmask = 0.0.0.0
Mon Mar 14 21:09:03 2016 us=132030   push_ifconfig_ipv6_defined = DISABLED
Mon Mar 14 21:09:03 2016 us=132045   push_ifconfig_ipv6_local = ::/0
Mon Mar 14 21:09:03 2016 us=132059   push_ifconfig_ipv6_remote = ::
Mon Mar 14 21:09:03 2016 us=132072   enable_c2c = DISABLED
Mon Mar 14 21:09:03 2016 us=132086   duplicate_cn = DISABLED
Mon Mar 14 21:09:03 2016 us=132099   cf_max = 0
Mon Mar 14 21:09:03 2016 us=132113   cf_per = 0
Mon Mar 14 21:09:03 2016 us=132127   max_clients = 1024
Mon Mar 14 21:09:03 2016 us=132142   max_routes_per_client = 256
Mon Mar 14 21:09:03 2016 us=132155   auth_user_pass_verify_script = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=132169   auth_user_pass_verify_script_via_file = DISABLED
Mon Mar 14 21:09:03 2016 us=132183   port_share_host = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=132197   port_share_port = 0
Mon Mar 14 21:09:03 2016 us=132210   client = DISABLED
Mon Mar 14 21:09:03 2016 us=132224   pull = DISABLED
Mon Mar 14 21:09:03 2016 us=132238   auth_user_pass_file = '[UNDEF]'
Mon Mar 14 21:09:03 2016 us=132273 OpenVPN 2.3.10 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan  4 2016
Mon Mar 14 21:09:03 2016 us=132314 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Mon Mar 14 21:09:03 2016 us=158985 Diffie-Hellman initialized with 2048 bit key
Mon Mar 14 21:09:03 2016 us=160150 TLS-Auth MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Mon Mar 14 21:09:03 2016 us=160209 Socket Buffers: R=[124928->124928] S=[124928->124928]
Mon Mar 14 21:09:03 2016 us=160535 ROUTE_GATEWAY x.x.x.x/255.255.240.0 IFACE=eth0 HWADDR=04:01:b6:23:c8:01
Mon Mar 14 21:09:03 2016 us=171731 TUN/TAP device tun0 opened
Mon Mar 14 21:09:03 2016 us=171884 TUN/TAP TX queue length set to 100
Mon Mar 14 21:09:03 2016 us=171974 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Mar 14 21:09:03 2016 us=172143 /sbin/ip link set dev tun0 up mtu 1500
Mon Mar 14 21:09:03 2016 us=181398 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Mar 14 21:09:03 2016 us=183713 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Mar 14 21:09:03 2016 us=189774 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Mar 14 21:09:03 2016 us=190241 failed to find UID for user nobodygroup
Mon Mar 14 21:09:03 2016 us=190270 Exiting due to fatal error
Mon Mar 14 21:09:03 2016 us=190389 /sbin/ip route del 10.8.0.0/24
Mon Mar 14 21:09:03 2016 us=195284 Closing TUN/TAP interface
Mon Mar 14 21:09:03 2016 us=195371 /sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2

I was looking at the opevpn-status.log... :x

Traffic

Skating_On_Thin_Ice wroteMon Mar 14 21:09:03 2016 us=190241 failed to find UID for user nobodygroup
Mon Mar 14 21:09:03 2016 us=190270 Exiting due to fatal error

Skating_On_Thin_Ice wroteServer:

user nobodygroup nobody

I think you can see the error .. :mrgreen:

Skating_On_Thin_Ice

Traffic wrote
Skating_On_Thin_Ice wroteMon Mar 14 21:09:03 2016 us=190241 failed to find UID for user nobodygroup
Mon Mar 14 21:09:03 2016 us=190270 Exiting due to fatal error
Skating_On_Thin_Ice wroteServer:
user nobodygroup nobody
I think you can see the error .. :mrgreen:

:lol: :lol: :lol: :lol: It's all good now thanks for putting up with my dumbass. Send me a btc addy if you want some $$$ as a token of my aprreciation. I'd probably still be checking openvpn-status.log scratching my head and wondering what kind of voodoo magic was going on. Thanks a ton.

Traffic

Sorry, I have not got round to bitcoin so far 🙁

You can make a small donation to my personal paypal account 😃
(see my profile for contact details and I can send you paypal details)

JW0914

Noticed a few things, however you may already be aware of them...

For future reference, please de-comment your configs prior to posting, as it makes it far easier on everyone. It will also make it easier on you if you de-comment the configs on the server, as it provides a cleaner config file in general.

You're not utilizing a ta.key, which prevents MITM attacks
You're not utilizing server and client specific certs, which can also allow MITM attacks
You're utilizing an obsolete and weak cipher (BlowFish), which defies the purpose of a VPN
- While OpenVPN does include Easy RSA, it's far better to utilize an openssl.conf and generate your own CA and certs. I posted a pre-built openssl.conf on GitHub that includes the commands required at the end of the file.
  - You will need to edit it to add in your custom CA/certificate names, IPs, DNS names, etc., however once that's done, it's simply a copy and paste of the commands
  - Add the OpenVPN bin folder (C:\Program Files\OpenVPN\bin) to your path variable (Control Panel\System and Security\System - Advanced System Settings - Environment Variables - System Variables - Path), which allows you to open any command/powershell terminal and issues openssl commands
  - The benefits to utilizing a custom openssl.conf versus Easy RSA are:
    - The certificates created are far more secure
    - A clean, organized hierarchy and trust chain of CA -> Intermediate VPN CA -> Client and Server certs
    - Organized client certificate names, allowing the separation of the Common Name from the IP/DNS name/email/user name (i.e. a certificate for 10.8.0.1 can have the Common Name My VPN Server with a SAN (Subject Alternative Name) of IP 10.8.0.1, DNS CentOS-VPN.Server, email xx@doman.com, etc.). Certificates utilizing the SAN option can have multiple IPs, multiple DNS names, multiple email names, multiple user names, etc.
    - The certificates for servers will have a designation as a server cert, thereby allowing it to authenticate only as a server
    - The certificates for clients will have a designation as a client cert, thereby allowing it to authenticate only as a client
Your MTU isn't optimized to your cipher
You're not utilizing an optimized topology, which should be subnet as net30 (P-T-P) is depreciated and obsolete.