Hello all,
for me is the first time i try to set openvpn. I have a server with ubuntu 16.04 and webmin and all the client with windows 10.
I have follow this guide: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04
I have the client1.ovpn:
client
dev tun
;dev-node MyTap
proto udp
remote 77.72.xxx.xxx 443 (ip removed by me)
;remote-random
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
#ca ca.crt
#cert client.crt
#key client.key
remote-cert-tls server
;tls-auth ta.key 1
cipher AES-128-CBC
auth SHA256
key-direction 1
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=IT, ST=TN, L=Trento, O=UpSens, OU=Office, CN=UpSens CA/name=server/emailAddress=info@upsens.com
Validity
Not Before: Mar 14 14:07:50 2017 GMT
Not After : Mar 12 14:07:50 2027 GMT
Subject: C=IT, ST=TN, L=Trento, O=UpSens, OU=Office, CN=client1/name=server/emailAddress=info@upsens.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
Netscape Comment:
X509v3 Subject Key Identifier:
X509v3 Authority Key Identifier:
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
X509v3 Subject Alternative Name:
DNS:client1
Signature Algorithm: sha256WithRSAEncryption
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
and the server config as
;local a.b.c.d
port 443
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
;topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
key-direction 0
cipher AES-128-CBC # AES
auth SHA256
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
;log-append openvpn.log
verb 3
;mute 20
but when i try to connect openvpn stop at
Thu Mar 16 13:30:03 2017 NOTE: --user option is not implemented on Windows
Thu Mar 16 13:30:03 2017 NOTE: --group option is not implemented on Windows
Thu Mar 16 13:30:03 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 31 2017
Thu Mar 16 13:30:03 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Mar 16 13:30:03 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Thu Mar 16 13:30:03 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Mar 16 13:30:03 2017 Need hold release from management interface, waiting...
Thu Mar 16 13:30:03 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Mar 16 13:30:03 2017 MANAGEMENT: CMD 'state on'
Thu Mar 16 13:30:03 2017 MANAGEMENT: CMD 'log all on'
Thu Mar 16 13:30:03 2017 MANAGEMENT: CMD 'hold off'
Thu Mar 16 13:30:03 2017 MANAGEMENT: CMD 'hold release'
Thu Mar 16 13:30:04 2017 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 16 13:30:04 2017 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 16 13:30:04 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:30:04 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:30:04 2017 UDP link local: (not bound)
Thu Mar 16 13:30:04 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:30:04 2017 MANAGEMENT: >STATE:1489667404,WAIT,,,,,,
Thu Mar 16 13:31:04 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:31:04 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:31:04 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:31:04 2017 MANAGEMENT: >STATE:1489667464,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:31:04 2017 Restart pause, 5 second(s)
Thu Mar 16 13:31:09 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:31:09 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:31:09 2017 UDP link local: (not bound)
Thu Mar 16 13:31:09 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:31:09 2017 MANAGEMENT: >STATE:1489667469,WAIT,,,,,,
Thu Mar 16 13:32:09 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:32:09 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:32:09 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:32:09 2017 MANAGEMENT: >STATE:1489667529,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:32:09 2017 Restart pause, 5 second(s)
Thu Mar 16 13:32:14 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:32:14 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:32:14 2017 UDP link local: (not bound)
Thu Mar 16 13:32:14 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:32:14 2017 MANAGEMENT: >STATE:1489667534,WAIT,,,,,,
Thu Mar 16 13:33:14 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:33:14 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:33:14 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:33:14 2017 MANAGEMENT: >STATE:1489667594,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:33:14 2017 Restart pause, 5 second(s)
Thu Mar 16 13:33:19 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:33:19 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:33:19 2017 UDP link local: (not bound)
Thu Mar 16 13:33:19 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:33:19 2017 MANAGEMENT: >STATE:1489667599,WAIT,,,,,,
Thu Mar 16 13:34:19 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:34:19 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:34:19 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:34:19 2017 MANAGEMENT: >STATE:1489667659,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:34:19 2017 Restart pause, 5 second(s)
Thu Mar 16 13:34:24 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:34:24 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:34:24 2017 UDP link local: (not bound)
Thu Mar 16 13:34:24 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:34:24 2017 MANAGEMENT: >STATE:1489667664,WAIT,,,,,,
Thu Mar 16 13:35:24 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:35:24 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:35:24 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:35:24 2017 MANAGEMENT: >STATE:1489667724,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:35:24 2017 Restart pause, 10 second(s)
Thu Mar 16 13:35:34 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:35:34 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:35:34 2017 UDP link local: (not bound)
Thu Mar 16 13:35:34 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:35:34 2017 MANAGEMENT: >STATE:1489667734,WAIT,,,,,,
Thu Mar 16 13:36:34 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:36:34 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:36:34 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:36:34 2017 MANAGEMENT: >STATE:1489667794,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:36:34 2017 Restart pause, 20 second(s)
Thu Mar 16 13:36:54 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxxx:443
Thu Mar 16 13:36:54 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:36:54 2017 UDP link local: (not bound)
Thu Mar 16 13:36:54 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:36:54 2017 MANAGEMENT: >STATE:1489667814,WAIT,,,,,,
Thu Mar 16 13:37:54 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:37:54 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:37:54 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:37:54 2017 MANAGEMENT: >STATE:1489667874,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:37:54 2017 Restart pause, 40 second(s)
Thu Mar 16 13:38:34 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:38:34 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Mar 16 13:38:34 2017 UDP link local: (not bound)
Thu Mar 16 13:38:34 2017 UDP link remote: [AF_INET]77.72.xxx.xxx:443
Thu Mar 16 13:38:34 2017 MANAGEMENT: >STATE:1489667914,WAIT,,,,,,
Thu Mar 16 13:39:34 2017 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Mar 16 13:39:34 2017 TLS Error: TLS handshake failed
Thu Mar 16 13:39:34 2017 SIGUSR1[soft,tls-error] received, process restarting
Thu Mar 16 13:39:34 2017 MANAGEMENT: >STATE:1489667974,RECONNECTING,tls-error,,,,,
Thu Mar 16 13:39:34 2017 Restart pause, 80 second(s)
my server is under a firewall which have the port 443 open
