Yet another handshake failed topic.
I`ve two machines running as a openvpn client (One Linux, one Windows). They work great.
I`m trying to setup another machine as client, but fails at the handshake.
It is using the exact same config file and certificates. (duplicate-cn is enabled on the server end)
I`m using the same openvpn version as on the Linux machine.
Disableing cert verification doenst make a difference. Also the time and date are correct on the new machine
Some pointers ar really appreciated.
Client log:
Mon Apr 18 12:25:08 2016 us=446428 Current Parameter Settings:
Mon Apr 18 12:25:08 2016 us=446634 config = '/root/client.ovpn'
Mon Apr 18 12:25:08 2016 us=446664 mode = 0
Mon Apr 18 12:25:08 2016 us=446699 persist_config = DISABLED
Mon Apr 18 12:25:08 2016 us=446720 persist_mode = 1
Mon Apr 18 12:25:08 2016 us=446737 show_ciphers = DISABLED
Mon Apr 18 12:25:08 2016 us=446753 show_digests = DISABLED
Mon Apr 18 12:25:08 2016 us=446770 show_engines = DISABLED
Mon Apr 18 12:25:08 2016 us=446786 genkey = DISABLED
Mon Apr 18 12:25:08 2016 us=446802 key_pass_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=446818 show_tls_ciphers = DISABLED
Mon Apr 18 12:25:08 2016 us=446845 Connection profiles [default]:
Mon Apr 18 12:25:08 2016 us=446866 proto = udp
Mon Apr 18 12:25:08 2016 us=446882 local = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=446898 local_port = 0
Mon Apr 18 12:25:08 2016 us=446914 remote = '205.157.152.22'
Mon Apr 18 12:25:08 2016 us=446930 remote_port = 1194
Mon Apr 18 12:25:08 2016 us=446946 remote_float = DISABLED
Mon Apr 18 12:25:08 2016 us=446961 bind_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=446978 bind_local = DISABLED
Mon Apr 18 12:25:08 2016 us=446994 connect_retry_seconds = 5
Mon Apr 18 12:25:08 2016 us=447010 connect_timeout = 10
Mon Apr 18 12:25:08 2016 us=447026 connect_retry_max = 0
Mon Apr 18 12:25:08 2016 us=447042 socks_proxy_server = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447058 socks_proxy_port = 0
Mon Apr 18 12:25:08 2016 us=447073 socks_proxy_retry = DISABLED
Mon Apr 18 12:25:08 2016 us=447089 tun_mtu = 1500
Mon Apr 18 12:25:08 2016 us=447105 tun_mtu_defined = ENABLED
Mon Apr 18 12:25:08 2016 us=447121 link_mtu = 1500
Mon Apr 18 12:25:08 2016 us=447137 link_mtu_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=447153 tun_mtu_extra = 0
Mon Apr 18 12:25:08 2016 us=447168 tun_mtu_extra_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=447184 mtu_discover_type = -1
Mon Apr 18 12:25:08 2016 us=447201 fragment = 0
Mon Apr 18 12:25:08 2016 us=447216 mssfix = 1450
Mon Apr 18 12:25:08 2016 us=447232 explicit_exit_notification = 0
Mon Apr 18 12:25:08 2016 us=447248 Connection profiles END
Mon Apr 18 12:25:08 2016 us=447263 remote_random = DISABLED
Mon Apr 18 12:25:08 2016 us=447279 ipchange = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447295 dev = 'tun'
Mon Apr 18 12:25:08 2016 us=447311 dev_type = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447326 dev_node = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447341 lladdr = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447358 topology = 1
Mon Apr 18 12:25:08 2016 us=447373 tun_ipv6 = DISABLED
Mon Apr 18 12:25:08 2016 us=447389 ifconfig_local = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447405 ifconfig_remote_netmask = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447421 ifconfig_noexec = DISABLED
Mon Apr 18 12:25:08 2016 us=447436 ifconfig_nowarn = DISABLED
Mon Apr 18 12:25:08 2016 us=447452 ifconfig_ipv6_local = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447468 ifconfig_ipv6_netbits = 0
Mon Apr 18 12:25:08 2016 us=447490 ifconfig_ipv6_remote = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=447522 shaper = 0
Mon Apr 18 12:25:08 2016 us=447554 mtu_test = 0
Mon Apr 18 12:25:08 2016 us=447573 mlock = DISABLED
Mon Apr 18 12:25:08 2016 us=447884 keepalive_ping = 0
Mon Apr 18 12:25:08 2016 us=447926 keepalive_timeout = 0
Mon Apr 18 12:25:08 2016 us=447947 inactivity_timeout = 0
Mon Apr 18 12:25:08 2016 us=447972 ping_send_timeout = 0
Mon Apr 18 12:25:08 2016 us=448003 ping_rec_timeout = 0
Mon Apr 18 12:25:08 2016 us=448035 ping_rec_timeout_action = 0
Mon Apr 18 12:25:08 2016 us=448067 ping_timer_remote = DISABLED
Mon Apr 18 12:25:08 2016 us=448093 remap_sigusr1 = 0
Mon Apr 18 12:25:08 2016 us=448110 persist_tun = ENABLED
Mon Apr 18 12:25:08 2016 us=448125 persist_local_ip = DISABLED
Mon Apr 18 12:25:08 2016 us=448141 persist_remote_ip = DISABLED
Mon Apr 18 12:25:08 2016 us=448156 persist_key = ENABLED
Mon Apr 18 12:25:08 2016 us=448172 passtos = DISABLED
Mon Apr 18 12:25:08 2016 us=448187 resolve_retry_seconds = 1000000000
Mon Apr 18 12:25:08 2016 us=448203 username = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448218 groupname = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448233 chroot_dir = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448248 cd_dir = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448263 writepid = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448278 up_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448293 down_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448308 down_pre = DISABLED
Mon Apr 18 12:25:08 2016 us=448324 up_restart = DISABLED
Mon Apr 18 12:25:08 2016 us=448339 up_delay = DISABLED
Mon Apr 18 12:25:08 2016 us=448355 daemon = DISABLED
Mon Apr 18 12:25:08 2016 us=448370 inetd = 0
Mon Apr 18 12:25:08 2016 us=448385 log = DISABLED
Mon Apr 18 12:25:08 2016 us=448401 suppress_timestamps = DISABLED
Mon Apr 18 12:25:08 2016 us=448417 nice = 0
Mon Apr 18 12:25:08 2016 us=448432 verbosity = 4
Mon Apr 18 12:25:08 2016 us=448448 mute = 0
Mon Apr 18 12:25:08 2016 us=448463 gremlin = 0
Mon Apr 18 12:25:08 2016 us=448478 status_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448493 status_file_version = 1
Mon Apr 18 12:25:08 2016 us=448509 status_file_update_freq = 60
Mon Apr 18 12:25:08 2016 us=448524 occ = ENABLED
Mon Apr 18 12:25:08 2016 us=448539 rcvbuf = 65536
Mon Apr 18 12:25:08 2016 us=448555 sndbuf = 65536
Mon Apr 18 12:25:08 2016 us=448570 mark = 0
Mon Apr 18 12:25:08 2016 us=448624 sockflags = 0
Mon Apr 18 12:25:08 2016 us=448646 fast_io = DISABLED
Mon Apr 18 12:25:08 2016 us=448662 lzo = 7
Mon Apr 18 12:25:08 2016 us=448678 route_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448694 route_default_gateway = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448710 route_default_metric = 0
Mon Apr 18 12:25:08 2016 us=448726 route_noexec = DISABLED
Mon Apr 18 12:25:08 2016 us=448742 route_delay = 0
Mon Apr 18 12:25:08 2016 us=448758 route_delay_window = 30
Mon Apr 18 12:25:08 2016 us=448774 route_delay_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=448790 route_nopull = DISABLED
Mon Apr 18 12:25:08 2016 us=448806 route_gateway_via_dhcp = DISABLED
Mon Apr 18 12:25:08 2016 us=448822 max_routes = 100
Mon Apr 18 12:25:08 2016 us=448837 allow_pull_fqdn = DISABLED
Mon Apr 18 12:25:08 2016 us=448853 management_addr = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448869 management_port = 0
Mon Apr 18 12:25:08 2016 us=448893 management_user_pass = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=448926 management_log_history_cache = 250
Mon Apr 18 12:25:08 2016 us=448959 management_echo_buffer_size = 100
Mon Apr 18 12:25:08 2016 us=449001 management_write_peer_info_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449056 management_client_user = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449093 management_client_group = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449121 management_flags = 0
Mon Apr 18 12:25:08 2016 us=449138 shared_secret_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449155 key_direction = 0
Mon Apr 18 12:25:08 2016 us=449171 ciphername_defined = ENABLED
Mon Apr 18 12:25:08 2016 us=449187 ciphername = 'BF-CBC'
Mon Apr 18 12:25:08 2016 us=449202 authname_defined = ENABLED
Mon Apr 18 12:25:08 2016 us=449219 authname = 'SHA1'
Mon Apr 18 12:25:08 2016 us=449234 prng_hash = 'SHA1'
Mon Apr 18 12:25:08 2016 us=449250 prng_nonce_secret_len = 16
Mon Apr 18 12:25:08 2016 us=449266 keysize = 0
Mon Apr 18 12:25:08 2016 us=449282 engine = DISABLED
Mon Apr 18 12:25:08 2016 us=449297 replay = ENABLED
Mon Apr 18 12:25:08 2016 us=449313 mute_replay_warnings = DISABLED
Mon Apr 18 12:25:08 2016 us=449330 replay_window = 64
Mon Apr 18 12:25:08 2016 us=449346 replay_time = 15
Mon Apr 18 12:25:08 2016 us=449362 packet_id_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449378 use_iv = ENABLED
Mon Apr 18 12:25:08 2016 us=449393 test_crypto = DISABLED
Mon Apr 18 12:25:08 2016 us=449409 tls_server = DISABLED
Mon Apr 18 12:25:08 2016 us=449424 tls_client = ENABLED
Mon Apr 18 12:25:08 2016 us=449440 key_method = 2
Mon Apr 18 12:25:08 2016 us=449455 ca_file = 'ca.crt'
Mon Apr 18 12:25:08 2016 us=449471 ca_path = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449486 dh_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449502 cert_file = 'client.crt'
Mon Apr 18 12:25:08 2016 us=449517 priv_key_file = 'client.key'
Mon Apr 18 12:25:08 2016 us=449533 pkcs12_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449549 cipher_list = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449564 tls_verify = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449580 tls_export_cert = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449634 verify_x509_type = 0
Mon Apr 18 12:25:08 2016 us=449651 verify_x509_name = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449667 crl_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449682 ns_cert_type = 0
Mon Apr 18 12:25:08 2016 us=449699 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449715 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449730 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449745 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449761 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449776 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449792 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449808 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449823 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449839 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449854 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449869 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449885 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449900 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449915 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449930 remote_cert_ku[i] = 0
Mon Apr 18 12:25:08 2016 us=449946 remote_cert_eku = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=449962 ssl_flags = 0
Mon Apr 18 12:25:08 2016 us=449978 tls_timeout = 2
Mon Apr 18 12:25:08 2016 us=449994 renegotiate_bytes = 0
Mon Apr 18 12:25:08 2016 us=450009 renegotiate_packets = 0
Mon Apr 18 12:25:08 2016 us=450025 renegotiate_seconds = 3600
Mon Apr 18 12:25:08 2016 us=450041 handshake_window = 60
Mon Apr 18 12:25:08 2016 us=450057 transition_window = 3600
Mon Apr 18 12:25:08 2016 us=450380 single_session = DISABLED
Mon Apr 18 12:25:08 2016 us=450407 push_peer_info = DISABLED
Mon Apr 18 12:25:08 2016 us=450423 tls_exit = DISABLED
Mon Apr 18 12:25:08 2016 us=450439 tls_auth_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=450472 server_network = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450492 server_netmask = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450520 server_network_ipv6 = ::
Mon Apr 18 12:25:08 2016 us=450538 server_netbits_ipv6 = 0
Mon Apr 18 12:25:08 2016 us=450555 server_bridge_ip = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450572 server_bridge_netmask = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450644 server_bridge_pool_start = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450687 server_bridge_pool_end = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450720 ifconfig_pool_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=450757 ifconfig_pool_start = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450792 ifconfig_pool_end = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450821 ifconfig_pool_netmask = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=450839 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=450856 ifconfig_pool_persist_refresh_freq = 600
Mon Apr 18 12:25:08 2016 us=450872 ifconfig_ipv6_pool_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=450890 ifconfig_ipv6_pool_base = ::
Mon Apr 18 12:25:08 2016 us=450906 ifconfig_ipv6_pool_netbits = 0
Mon Apr 18 12:25:08 2016 us=450922 n_bcast_buf = 256
Mon Apr 18 12:25:08 2016 us=450938 tcp_queue_limit = 64
Mon Apr 18 12:25:08 2016 us=450954 real_hash_size = 256
Mon Apr 18 12:25:08 2016 us=450969 virtual_hash_size = 256
Mon Apr 18 12:25:08 2016 us=450985 client_connect_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451001 learn_address_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451017 client_disconnect_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451033 client_config_dir = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451048 ccd_exclusive = DISABLED
Mon Apr 18 12:25:08 2016 us=451064 tmp_dir = '/tmp'
Mon Apr 18 12:25:08 2016 us=451080 push_ifconfig_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=451097 push_ifconfig_local = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=451114 push_ifconfig_remote_netmask = 0.0.0.0
Mon Apr 18 12:25:08 2016 us=451131 push_ifconfig_ipv6_defined = DISABLED
Mon Apr 18 12:25:08 2016 us=451148 push_ifconfig_ipv6_local = ::/0
Mon Apr 18 12:25:08 2016 us=451166 push_ifconfig_ipv6_remote = ::
Mon Apr 18 12:25:08 2016 us=451181 enable_c2c = DISABLED
Mon Apr 18 12:25:08 2016 us=451197 duplicate_cn = DISABLED
Mon Apr 18 12:25:08 2016 us=451213 cf_max = 0
Mon Apr 18 12:25:08 2016 us=451229 cf_per = 0
Mon Apr 18 12:25:08 2016 us=451245 max_clients = 1024
Mon Apr 18 12:25:08 2016 us=451261 max_routes_per_client = 256
Mon Apr 18 12:25:08 2016 us=451277 auth_user_pass_verify_script = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451293 auth_user_pass_verify_script_via_file = DISABLED
Mon Apr 18 12:25:08 2016 us=451310 port_share_host = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451326 port_share_port = 0
Mon Apr 18 12:25:08 2016 us=451341 client = ENABLED
Mon Apr 18 12:25:08 2016 us=451357 pull = ENABLED
Mon Apr 18 12:25:08 2016 us=451372 auth_user_pass_file = '[UNDEF]'
Mon Apr 18 12:25:08 2016 us=451391 OpenVPN 2.3.8 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Apr 18 2016
Mon Apr 18 12:25:08 2016 us=451458 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Mon Apr 18 12:25:08 2016 us=451572 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Apr 18 12:25:08 2016 us=452951 WARNING: file 'client.key' is group or others accessible
Mon Apr 18 12:25:08 2016 us=453370 LZO compression initialized
Mon Apr 18 12:25:08 2016 us=453634 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Mon Apr 18 12:25:08 2016 us=453756 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Apr 18 12:25:08 2016 us=453851 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Apr 18 12:25:08 2016 us=453928 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 18 12:25:08 2016 us=453950 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 18 12:25:08 2016 us=454044 Local Options hash (VER=V4): '41690919'
Mon Apr 18 12:25:08 2016 us=454081 Expected Remote Options hash (VER=V4): '530fdded'
Mon Apr 18 12:25:08 2016 us=454135 UDPv4 link local: [undef]
Mon Apr 18 12:25:08 2016 us=454179 UDPv4 link remote: [AF_INET]205.157.152.22:1194
Mon Apr 18 12:25:08 2016 us=488971 TLS: Initial packet from [AF_INET]205.157.152.22:1194, sid=deb22f9b f8cc5f3c
Mon Apr 18 12:25:08 2016 us=616905 VERIFY OK: depth=1, C=US, ST=California, L=Someplace, O=GSC, OU=HQ, CN=CA001, name=CA001, emailAddress=ca@ca.com
Mon Apr 18 12:25:08 2016 us=617041 VERIFY ERROR: depth=0, error=certificate signature failure: C=US, ST=California, L=Some, O=GSC, OU=HQ, CN=ovpn.local, name=ovpnserv, emailAddress=ovpn@x.com
Mon Apr 18 12:25:08 2016 us=617245 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mon Apr 18 12:25:08 2016 us=617278 TLS Error: TLS object -> incoming plaintext read error
Mon Apr 18 12:25:08 2016 us=617296 TLS Error: TLS handshake failed
Mon Apr 18 12:25:08 2016 us=617449 TCP/UDP: Closing socket
Mon Apr 18 12:25:08 2016 us=617543 SIGUSR1[soft,tls-error] received, process restarting
Mon Apr 18 12:25:08 2016 us=617577 Restart pause, 2 second(s)
Mon Apr 18 12:25:10 2016 us=617819 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Apr 18 12:25:10 2016 us=617918 Re-using SSL/TLS context
Mon Apr 18 12:25:10 2016 us=617987 LZO compression initialized
Mon Apr 18 12:25:10 2016 us=618102 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:3 ]
Mon Apr 18 12:25:10 2016 us=618160 Socket Buffers: R=[212992->131072] S=[212992->131072]
Mon Apr 18 12:25:10 2016 us=618194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Mon Apr 18 12:25:10 2016 us=618236 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Apr 18 12:25:10 2016 us=618255 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Apr 18 12:25:10 2016 us=618290 Local Options hash (VER=V4): '41690919'
Mon Apr 18 12:25:10 2016 us=618317 Expected Remote Options hash (VER=V4): '530fdded'
Mon Apr 18 12:25:10 2016 us=618340 UDPv4 link local: [undef]
Mon Apr 18 12:25:10 2016 us=618363 UDPv4 link remote: [AF_INET]205.157.152.22:1194
Mon Apr 18 12:25:10 2016 us=634552 TLS: Initial packet from [AF_INET]205.157.152.22:1194, sid=946d2c4e 3bdaf1ca
Mon Apr 18 12:25:10 2016 us=738064 VERIFY OK: depth=1, C=US, ST=California, L=Someplace, O=GSC, OU=HQ, CN=CA001, name=CA001, emailAddress=ca@ca.com
Mon Apr 18 12:25:10 2016 us=738151 VERIFY ERROR: depth=0, error=certificate signature failure: C=US, ST=California, L=Some, O=GSC, OU=HQ, CN=ovpn.local, name=ovpnserv, emailAddress=ovpn@x.com
Mon Apr 18 12:25:10 2016 us=738208 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Mon Apr 18 12:25:10 2016 us=738221 TLS Error: TLS object -> incoming plaintext read error
Mon Apr 18 12:25:10 2016 us=738229 TLS Error: TLS handshake failed
Mon Apr 18 12:25:10 2016 us=738296 TCP/UDP: Closing socket
Mon Apr 18 12:25:10 2016 us=738341 SIGUSR1[soft,tls-error] received, process restarting
client config
client
dev tun
proto udp
remote ##### 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
comp-lzo
verb 4
I do not have access to the server config file at this time.
