unelune
Hi to all,
I installed openvpn server on a VPS running ubuntu 15.10 (64bits) and I cannot connect to it from my home client.
The error I get is:
Sat Apr 23 05:57:47 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Apr 23 05:57:47 2016 TLS Error: TLS handshake failed
Sat Apr 23 05:57:47 2016 SIGUSR1[soft,tls-error] received, process restarting
Sat Apr 23 05:57:47 2016 MANAGEMENT: >STATE:1461405467,RECONNECTING,tls-error,,
Sat Apr 23 05:57:47 2016 Restart pause, 2 second(s)
Sat Apr 23 05:57:49 2016 MANAGEMENT: CMD 'proxy NONE '
Sat Apr 23 05:57:50 2016 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Apr 23 05:57:50 2016 UDPv4 link local: [undef]
Sat Apr 23 05:57:50 2016 UDPv4 link remote: [AF_INET]159.56.128.259:1194
Sat Apr 23 05:57:50 2016 MANAGEMENT: >STATE:1461405470,WAIT,,,
Openvpn web site says that "TLS" is a connectivity issue...
1. my vps is pingable
2. on my openvpn server, I see requests coming on port 1194
3. on my home PC, I see server sending packets to me but not on port 1194, they are instead sent on port 52139 and 52140, 52141, 52144, etc.
I have an ASA firewall at home and have authorized only port 1194 from my VPS server.
Wireshark snapshots (ASA packet capture):
159.56.128.259: VPS server (I changed it for this post, it's not the real one)
172.21.31.9: IP at home
Internet Protocol Version 4, Src: 159.56.128.259, Dst: 172.21.31.9
Transmission Control Protocol, Src Port: 943 (943), Dst Port: 52139 (52139), Seq: 1, Ack: 214, Len: 1380
...
Internet Protocol Version 4, Src: 159.56.128.259, Dst: 172.21.31.9
Transmission Control Protocol, Src Port: 943 (943), Dst Port: 52140 (52140), Seq: 0, Ack: 1, Len: 0
...
My question is this: Is it normal that openvpn server send packets on port 52xxx instead of using 1194?
regards,
jo
