Openvpn will not intialize

scarfacereject

Hey guys, this is my first time setting up vpn so I am a I'll apologize for my ignorance in advanced.
I have a openvpn server setup on my raspberrypi. When I try to intialize the connection from my windows desktop I get the follwing errors.

OpenVPN 2.1_rc19 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Jul 16 2009
NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Control Channel Authentication: tls-auth using INLINE static key file
LZO compression initialized
UDPv4 link local: [undef]
UDPv4 link remote: 24.211.209.170:1194
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
SIGUSR1[soft,tls-error] received, process restarting

Server.conf:
local 172.16.0.6 # SWAP THIS NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
dev tun
proto udp #Some people prefer to use tcp. Don't change it if you don't know.
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/zay.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/keys/zay.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/keys/dh2048.pem # If you changed to 2048, change that here!
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 172.16.0.6 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 172.16.0.1 255.255.255.0 " # This should already match your router address and not need to be changed.
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 13

Client config:
client
dev tun
proto udp
remote scarfacereject.ddns.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20

From: /vars/log/openvpn.log

Sat Mar 19 10:01:55 2016 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Sat Mar 19 10:01:55 2016 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Sat Mar 19 10:01:56 2016 WARNING: file '/etc/openvpn/easy-rsa/keys/zay.key' is group or others accessible
Sat Mar 19 10:01:56 2016 WARNING: file '/etc/openvpn/easy-rsa/keys/ta.key' is group or others accessible
Sat Mar 19 10:01:56 2016 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Sat Mar 19 10:01:56 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 19 10:01:56 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 19 10:01:56 2016 TUN/TAP device tun0 opened
Sat Mar 19 10:01:56 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Mar 19 10:01:56 2016 /sbin/ip link set dev tun0 up mtu 1500
Sat Mar 19 10:01:56 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sat Mar 19 10:01:56 2016 GID set to nogroup
Sat Mar 19 10:01:56 2016 UDPv4 link local (bound): [AF_INET]172.16.0.6:1194
Sat Mar 19 10:01:56 2016 UDPv4 link remote: [undef]
Sat Mar 19 10:01:56 2016 Initialization Sequence Completed

If you need anything else please help guide me and I will give you what I can. Thanks guys!

Traffic

This in your server log:

scarfacereject wroteFrom: /vars/log/openvpn.log

Initialization Sequence Completed

and this in your client log:

scarfacereject wroteTLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

probably means you have not forwarded the port at your router .. or your firewall is blocking you.