Individual client connection problems.

mlwartman

I'm not sure if this is the right thread, but i didn't see one more fitting, so here it goes.

I am using an embedded openvpn server on a netgear router. the service itself functions perfectly.

One client, who happens to be the owner of the company, has been using the vpn tunnel pretty frequently since i set it up. however, yesterday he contacted me regarding his openvpn client not connecting. I tested my connection with success, and was able to install the openvpn client on another computer on his home network and established a connection. However, his client seems to be failing at the part where it establishes the ssl tunnel. below is the log file for his client.

Tue Jun 21 15:11:35 2016 us=23710 Current Parameter Settings:
Tue Jun 21 15:11:35 2016 us=23710 config = 'client1.ovpn'
Tue Jun 21 15:11:35 2016 us=23710 mode = 0
Tue Jun 21 15:11:35 2016 us=23710 show_ciphers = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 show_digests = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 show_engines = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 genkey = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 key_pass_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 show_tls_ciphers = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 Connection profiles [default]:
Tue Jun 21 15:11:35 2016 us=23710 proto = udp
Tue Jun 21 15:11:35 2016 us=23710 local = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 local_port = 0
Tue Jun 21 15:11:35 2016 us=23710 remote = '173.89.84.30'
Tue Jun 21 15:11:35 2016 us=23710 remote_port = 1297
Tue Jun 21 15:11:35 2016 us=23710 remote_float = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 bind_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 bind_local = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 connect_retry_seconds = 5
Tue Jun 21 15:11:35 2016 us=23710 connect_timeout = 10
Tue Jun 21 15:11:35 2016 us=23710 connect_retry_max = 0
Tue Jun 21 15:11:35 2016 us=23710 socks_proxy_server = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 socks_proxy_port = 0
Tue Jun 21 15:11:35 2016 us=23710 socks_proxy_retry = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 tun_mtu = 1500
Tue Jun 21 15:11:35 2016 us=23710 tun_mtu_defined = ENABLED
Tue Jun 21 15:11:35 2016 us=23710 link_mtu = 1500
Tue Jun 21 15:11:35 2016 us=23710 link_mtu_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 tun_mtu_extra = 32
Tue Jun 21 15:11:35 2016 us=23710 tun_mtu_extra_defined = ENABLED
Tue Jun 21 15:11:35 2016 us=23710 mtu_discover_type = -1
Tue Jun 21 15:11:35 2016 us=23710 fragment = 0
Tue Jun 21 15:11:35 2016 us=23710 mssfix = 1450
Tue Jun 21 15:11:35 2016 us=23710 explicit_exit_notification = 0
Tue Jun 21 15:11:35 2016 us=23710 Connection profiles END
Tue Jun 21 15:11:35 2016 us=23710 remote_random = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 ipchange = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 dev = 'tap'
Tue Jun 21 15:11:35 2016 us=23710 dev_type = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 dev_node = 'NETGEAR-VPN'
Tue Jun 21 15:11:35 2016 us=23710 lladdr = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 topology = 1
Tue Jun 21 15:11:35 2016 us=23710 tun_ipv6 = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_local = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_remote_netmask = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_noexec = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_nowarn = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_ipv6_local = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_ipv6_netbits = 0
Tue Jun 21 15:11:35 2016 us=23710 ifconfig_ipv6_remote = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 shaper = 0
Tue Jun 21 15:11:35 2016 us=23710 mtu_test = 0
Tue Jun 21 15:11:35 2016 us=23710 mlock = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 keepalive_ping = 0
Tue Jun 21 15:11:35 2016 us=23710 keepalive_timeout = 0
Tue Jun 21 15:11:35 2016 us=23710 inactivity_timeout = 0
Tue Jun 21 15:11:35 2016 us=23710 ping_send_timeout = 0
Tue Jun 21 15:11:35 2016 us=23710 ping_rec_timeout = 0
Tue Jun 21 15:11:35 2016 us=23710 ping_rec_timeout_action = 0
Tue Jun 21 15:11:35 2016 us=23710 ping_timer_remote = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 remap_sigusr1 = 0
Tue Jun 21 15:11:35 2016 us=23710 persist_tun = ENABLED
Tue Jun 21 15:11:35 2016 us=23710 persist_local_ip = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 persist_remote_ip = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 persist_key = ENABLED
Tue Jun 21 15:11:35 2016 us=23710 passtos = DISABLED
Tue Jun 21 15:11:35 2016 us=23710 resolve_retry_seconds = 1000000000
Tue Jun 21 15:11:35 2016 us=23710 username = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=23710 groupname = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 chroot_dir = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 cd_dir = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 writepid = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 up_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 down_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 down_pre = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 up_restart = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 up_delay = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 daemon = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 inetd = 0
Tue Jun 21 15:11:35 2016 us=38710 log = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 suppress_timestamps = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 nice = 0
Tue Jun 21 15:11:35 2016 us=38710 verbosity = 5
Tue Jun 21 15:11:35 2016 us=38710 mute = 0
Tue Jun 21 15:11:35 2016 us=38710 gremlin = 0
Tue Jun 21 15:11:35 2016 us=38710 status_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 status_file_version = 1
Tue Jun 21 15:11:35 2016 us=38710 status_file_update_freq = 60
Tue Jun 21 15:11:35 2016 us=38710 occ = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 rcvbuf = 0
Tue Jun 21 15:11:35 2016 us=38710 sndbuf = 0
Tue Jun 21 15:11:35 2016 us=38710 sockflags = 0
Tue Jun 21 15:11:35 2016 us=38710 fast_io = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 lzo = 7
Tue Jun 21 15:11:35 2016 us=38710 route_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 route_default_gateway = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 route_default_metric = 0
Tue Jun 21 15:11:35 2016 us=38710 route_noexec = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 route_delay = 5
Tue Jun 21 15:11:35 2016 us=38710 route_delay_window = 30
Tue Jun 21 15:11:35 2016 us=38710 route_delay_defined = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 route_nopull = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 route_gateway_via_dhcp = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 max_routes = 100
Tue Jun 21 15:11:35 2016 us=38710 allow_pull_fqdn = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 management_addr = '127.0.0.1'
Tue Jun 21 15:11:35 2016 us=38710 management_port = 25340
Tue Jun 21 15:11:35 2016 us=38710 management_user_pass = 'stdin'
Tue Jun 21 15:11:35 2016 us=38710 management_log_history_cache = 250
Tue Jun 21 15:11:35 2016 us=38710 management_echo_buffer_size = 100
Tue Jun 21 15:11:35 2016 us=38710 management_write_peer_info_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 management_client_user = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 management_client_group = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 management_flags = 6
Tue Jun 21 15:11:35 2016 us=38710 shared_secret_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 key_direction = 0
Tue Jun 21 15:11:35 2016 us=38710 ciphername_defined = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 ciphername = 'AES-128-CBC'
Tue Jun 21 15:11:35 2016 us=38710 authname_defined = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 authname = 'SHA1'
Tue Jun 21 15:11:35 2016 us=38710 prng_hash = 'SHA1'
Tue Jun 21 15:11:35 2016 us=38710 prng_nonce_secret_len = 16
Tue Jun 21 15:11:35 2016 us=38710 keysize = 0
Tue Jun 21 15:11:35 2016 us=38710 engine = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 replay = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 mute_replay_warnings = DISABLED
Tue Jun 21 15:11:35 2016 us=38710 replay_window = 64
Tue Jun 21 15:11:35 2016 us=38710 replay_time = 15
Tue Jun 21 15:11:35 2016 us=38710 packet_id_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=38710 use_iv = ENABLED
Tue Jun 21 15:11:35 2016 us=38710 test_crypto = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 tls_server = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 tls_client = ENABLED
Tue Jun 21 15:11:35 2016 us=43710 key_method = 2
Tue Jun 21 15:11:35 2016 us=43710 ca_file = 'ca.crt'
Tue Jun 21 15:11:35 2016 us=43710 ca_path = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 dh_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 cert_file = 'client.crt'
Tue Jun 21 15:11:35 2016 us=43710 extra_certs_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 priv_key_file = 'client.key'
Tue Jun 21 15:11:35 2016 us=43710 pkcs12_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 cryptoapi_cert = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 cipher_list = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 tls_verify = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 tls_export_cert = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 verify_x509_type = 0
Tue Jun 21 15:11:35 2016 us=43710 verify_x509_name = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 crl_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 ns_cert_type = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_ku[i] = 0
Tue Jun 21 15:11:35 2016 us=43710 remote_cert_eku = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 ssl_flags = 0
Tue Jun 21 15:11:35 2016 us=43710 tls_timeout = 2
Tue Jun 21 15:11:35 2016 us=43710 renegotiate_bytes = 0
Tue Jun 21 15:11:35 2016 us=43710 renegotiate_packets = 0
Tue Jun 21 15:11:35 2016 us=43710 renegotiate_seconds = 3600
Tue Jun 21 15:11:35 2016 us=43710 handshake_window = 60
Tue Jun 21 15:11:35 2016 us=43710 transition_window = 3600
Tue Jun 21 15:11:35 2016 us=43710 single_session = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 push_peer_info = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 tls_exit = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 tls_auth_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_protected_authentication = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_private_mode = 00000000
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_cert_private = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_pin_cache_period = -1
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_id = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 pkcs11_id_management = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 server_network = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 server_netmask = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 server_network_ipv6 = ::
Tue Jun 21 15:11:35 2016 us=43710 server_netbits_ipv6 = 0
Tue Jun 21 15:11:35 2016 us=43710 server_bridge_ip = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 server_bridge_netmask = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 server_bridge_pool_start = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 server_bridge_pool_end = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_start = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_end = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_netmask = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_pool_persist_refresh_freq = 600
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_ipv6_pool_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_ipv6_pool_base = ::
Tue Jun 21 15:11:35 2016 us=43710 ifconfig_ipv6_pool_netbits = 0
Tue Jun 21 15:11:35 2016 us=43710 n_bcast_buf = 256
Tue Jun 21 15:11:35 2016 us=43710 tcp_queue_limit = 64
Tue Jun 21 15:11:35 2016 us=43710 real_hash_size = 256
Tue Jun 21 15:11:35 2016 us=43710 virtual_hash_size = 256
Tue Jun 21 15:11:35 2016 us=43710 client_connect_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 learn_address_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 client_disconnect_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 client_config_dir = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 ccd_exclusive = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 tmp_dir = 'C:\Users\JOHNKO~1\AppData\Local\Temp\'
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_local = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_remote_netmask = 0.0.0.0
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_ipv6_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_ipv6_local = ::/0
Tue Jun 21 15:11:35 2016 us=43710 push_ifconfig_ipv6_remote = ::
Tue Jun 21 15:11:35 2016 us=43710 enable_c2c = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 duplicate_cn = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 cf_max = 0
Tue Jun 21 15:11:35 2016 us=43710 cf_per = 0
Tue Jun 21 15:11:35 2016 us=43710 max_clients = 1024
Tue Jun 21 15:11:35 2016 us=43710 max_routes_per_client = 256
Tue Jun 21 15:11:35 2016 us=43710 auth_user_pass_verify_script = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 auth_user_pass_verify_script_via_file = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 client = ENABLED
Tue Jun 21 15:11:35 2016 us=43710 pull = ENABLED
Tue Jun 21 15:11:35 2016 us=43710 auth_user_pass_file = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 show_net_up = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 route_method = 0
Tue Jun 21 15:11:35 2016 us=43710 block_outside_dns = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 ip_win32_defined = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 ip_win32_type = 3
Tue Jun 21 15:11:35 2016 us=43710 dhcp_masq_offset = 0
Tue Jun 21 15:11:35 2016 us=43710 dhcp_lease_time = 31536000
Tue Jun 21 15:11:35 2016 us=43710 tap_sleep = 0
Tue Jun 21 15:11:35 2016 us=43710 dhcp_options = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 dhcp_renew = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 dhcp_pre_release = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 dhcp_release = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 domain = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 netbios_scope = '[UNDEF]'
Tue Jun 21 15:11:35 2016 us=43710 netbios_node_type = 0
Tue Jun 21 15:11:35 2016 us=43710 disable_nbt = DISABLED
Tue Jun 21 15:11:35 2016 us=43710 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jun 21 15:11:35 2016 us=43710 Windows version 6.1 (Windows 7) 64bit
Tue Jun 21 15:11:35 2016 us=43710 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Enter Management Password:
Tue Jun 21 15:11:35 2016 us=43710 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jun 21 15:11:35 2016 us=43710 Need hold release from management interface, waiting...
Tue Jun 21 15:11:35 2016 us=508711 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jun 21 15:11:35 2016 us=608711 MANAGEMENT: CMD 'state on'
Tue Jun 21 15:11:35 2016 us=608711 MANAGEMENT: CMD 'log all on'
Tue Jun 21 15:11:35 2016 us=688711 MANAGEMENT: CMD 'hold off'
Tue Jun 21 15:11:35 2016 us=688711 MANAGEMENT: CMD 'hold release'
Tue Jun 21 15:11:35 2016 us=688711 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jun 21 15:11:35 2016 us=813711 LZO compression initialized
Tue Jun 21 15:11:35 2016 us=813711 Control Channel MTU parms [ L:1590 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Jun 21 15:11:35 2016 us=813711 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jun 21 15:11:35 2016 us=813711 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:143 ET:32 EL:3 AF:3/1 ]
Tue Jun 21 15:11:35 2016 us=813711 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Jun 21 15:11:35 2016 us=813711 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Jun 21 15:11:35 2016 us=813711 Local Options hash (VER=V4): 'b498be7c'
Tue Jun 21 15:11:35 2016 us=813711 Expected Remote Options hash (VER=V4): '26e19fc0'
Tue Jun 21 15:11:35 2016 us=813711 UDPv4 link local: [undef]
Tue Jun 21 15:11:35 2016 us=813711 UDPv4 link remote: [AF_INET]173.89.84.30:1297
Tue Jun 21 15:11:35 2016 us=813711 MANAGEMENT: >STATE:1466536295,WAIT,,,
Tue Jun 21 15:11:35 2016 us=873712 MANAGEMENT: >STATE:1466536295,AUTH,,,
Tue Jun 21 15:11:35 2016 us=873712 TLS: Initial packet from [AF_INET]173.89.84.30:1297, sid=8bc94843 6ce36c25
Tue Jun 21 15:11:36 2016 us=163712 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Tue Jun 21 15:11:36 2016 us=163712 VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Tue Jun 21 15:12:35 2016 us=592795 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jun 21 15:12:35 2016 us=592795 TLS Error: TLS handshake failed
Tue Jun 21 15:12:35 2016 us=592795 TCP/UDP: Closing socket
Tue Jun 21 15:12:35 2016 us=592795 SIGUSR1[soft,tls-error] received, process restarting
Tue Jun 21 15:12:35 2016 us=592795 MANAGEMENT: >STATE:1466536355,RECONNECTING,tls-error,,
Tue Jun 21 15:12:35 2016 us=592795 Restart pause, 2 second(s)
Tue Jun 21 15:12:37 2016 us=592798 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Jun 21 15:12:37 2016 us=592798 Re-using SSL/TLS context
Tue Jun 21 15:12:37 2016 us=592798 LZO compression initialized
Tue Jun 21 15:12:37 2016 us=592798 Control Channel MTU parms [ L:1590 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Jun 21 15:12:37 2016 us=592798 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Jun 21 15:12:37 2016 us=592798 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:143 ET:32 EL:3 AF:3/1 ]
Tue Jun 21 15:12:37 2016 us=592798 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Jun 21 15:12:37 2016 us=592798 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Jun 21 15:12:37 2016 us=592798 Local Options hash (VER=V4): 'b498be7c'
Tue Jun 21 15:12:37 2016 us=592798 Expected Remote Options hash (VER=V4): '26e19fc0'
Tue Jun 21 15:12:37 2016 us=592798 UDPv4 link local: [undef]
Tue Jun 21 15:12:37 2016 us=592798 UDPv4 link remote: [AF_INET]173.89.84.30:1297
Tue Jun 21 15:12:37 2016 us=592798 MANAGEMENT: >STATE:1466536357,WAIT,,,
Tue Jun 21 15:12:37 2016 us=647798 MANAGEMENT: >STATE:1466536357,AUTH,,,
Tue Jun 21 15:12:37 2016 us=647798 TLS: Initial packet from [AF_INET]173.89.84.30:1297, sid=ccde1cf3 358ee928
Tue Jun 21 15:12:37 2016 us=942799 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Tue Jun 21 15:12:37 2016 us=942799 VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com
Tue Jun 21 15:12:39 2016 us=337801 TCP/UDP: Closing socket
Tue Jun 21 15:12:39 2016 us=337801 SIGTERM[hard,] received, process exiting
Tue Jun 21 15:12:39 2016 us=337801 MANAGEMENT: >STATE:1466536359,EXITING,SIGTERM,,
WRWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWWRWWWWWRWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWWR

I have reinstalled the client on his laptop multiple times using the same configuration and installer that i used to setup the other machines that were able to establish a tunnel without issue. I have turned off his firewall, disables windows security essentials after adding a whitelist exception for the openvpn.exe executable..

again, i am extremely confident that this is not a server configuration issue, as this is the only client affected and this client was able to connect as recently as last week. Any advice would be appreciated!!

TinCanTech

mlwartman wroteI am using an embedded openvpn server on a netgear router. the service itself functions perfectly

it appears not so ..

mlwartman

i would say that it does. the service works properly for every other user, including other computers on his home network. given that there is no user specific authentication, i can't see how it would be anything but a client issue.

TinCanTech

Are you blaming OpenVPN for that ?

mlwartman

no, but it would make sense that other openvpn users might have experienced this issue and had an idea for a solution

why are you so confrontational? did i offend you at some point?

TinCanTech

I am not confrontational.

The details you have chosen to post suggest that you have a network problem.